• caglararli@hotmail.com
  • 05386281520

CVE-2024-0345 | CodeAstro Vehicle Booking System 1.0 User Registration usr/usr-register.php Full_Name/Last_Name/Address cross site scripting

Çağlar Arlı      -    39 Views

CVE-2024-0345 | CodeAstro Vehicle Booking System 1.0 User Registration usr/usr-register.php Full_Name/Last_Name/Address cross site scripting

A vulnerability, which was classified as problematic, was found in CodeAstro Vehicle Booking System 1.0. This affects an unknown part of the file usr/usr-register.php of the component User Registration. The manipulation of the argument Full_Name/Last_Name/Address with the input <script>alert(document.cookie)</script> leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-0345. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.