CVE-2024-4075

A vulnerability classified as problematic has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file login.php. The manipulation of the argument txtAddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-261801 was assigned to this vulnerability.
Configurations

No configuration.

History

24 Apr 2024, 13:39

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad ha sido encontrada en Kashipara Online Furniture Shopping Ecommerce Website 1.0 y clasificada como problemática. Una parte desconocida del archivo login.php afecta a esta vulnerabilidad. La manipulación del argumento txtAddress conduce a cross site scripting. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-261801.

23 Apr 2024, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-23 23:15

Updated : 2024-05-17 02:40


NVD link : CVE-2024-4075

Mitre link : CVE-2024-4075

CVE.ORG link : CVE-2024-4075


JSON object : View

Products Affected

No product.

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')