A vulnerability has been found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Venue_controller/edit_venue/ of the component Edit Venue Page. The manipulation of the argument Venue map leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256045 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
Link | Resource |
---|---|
https://drive.google.com/file/d/11QliZKy-7ylKph1vwlXVHaRn5Jmk0Bjg/view?usp=drivesdk | Exploit |
https://drive.google.com/file/d/11QliZKy-7ylKph1vwlXVHaRn5Jmk0Bjg/view?usp=drivesdk | Exploit |
https://vuldb.com/?ctiid.256045 | Permissions Required |
https://vuldb.com/?ctiid.256045 | Permissions Required |
https://vuldb.com/?id.256045 | Permissions Required |
https://vuldb.com/?id.256045 | Permissions Required |
Configurations
Configuration 1 (hide)
|
History
12 Mar 2025, 13:26
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
CWE | ||
First Time |
Bdtask g-prescription Gynaecology \& Obs Consultation
Bdtask |
|
References | () https://vuldb.com/?id.256045 - Permissions Required | |
References | () https://vuldb.com/?ctiid.256045 - Permissions Required | |
References | () https://drive.google.com/file/d/11QliZKy-7ylKph1vwlXVHaRn5Jmk0Bjg/view?usp=drivesdk - Exploit | |
CPE | cpe:2.3:a:bdtask:g-prescription_gynaecology_\&_obs_consultation:1.0:*:*:*:*:*:*:* |
08 Mar 2024, 01:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-03-08 01:15
Updated : 2025-03-12 13:26
NVD link : CVE-2024-2276
Mitre link : CVE-2024-2276
JSON object : View
Products Affected
bdtask
- g-prescription_gynaecology_\&_obs_consultation
CWE
No CWE.