Description
A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /appointments.php. The manipulation of the argument patient_id results in cross site scripting. It is possible to launch the attack remotely. The exploit is now public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodester | Patients Waiting Area Queue Management System | 1.0 | — |
| Patrick Mvuma | Patients Waiting Area Queue Management System | 1.0 | — |
References
- VDB-344851 | SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System appointments.php cross site scripting vdb-entry technical-description
- VDB-344851 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #747920 | Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Doubled Character XSS Manipulations third-party-advisory
- https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Patients-Waiting-Area-Queue-Management-System-appointments-XSS.md exploit