A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /edit_admin.php. The manipulation of the argument firstname leads t…
Low CVSS 2.4
Summary
A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /edit_admin.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Other parameters might be affected as well.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://github.com/ChenGuangHuangHun/CVE/issues/2 Exploit
- https://vuldb.com/?ctiid.327360 Permissions Required
- https://vuldb.com/?id.327360 Third Party Advisory
- https://vuldb.com/?submit.666213 Third Party Advisory
- https://github.com/ChenGuangHuangHun/CVE/issues/2 Exploit
Timeline
- nvd_ingest NVD