CVE-2022-2213

🗓️ 27 Jun 2022 06:45:28Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 78 Views🌐 WEB

Vulnerability in SourceCodester Library Management System 1.0 allows remote attackers to launch cross-site scripting attacks via manipulation of the argument Name in /admin/edit_admin_details.php?id=admin

Reporter	Title	Published	Views	Family All 10
CNNVD	Library Management System 跨站脚本漏洞	27 Jun 202200:00	–	cnnvd
CNVD	Library Management System跨站脚本漏洞	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-2213 SourceCodester Library Management System cross site scripting	27 Jun 202206:45	–	cvelist
EUVD	EUVD-2022-34496	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2213	27 Jun 202207:15	–	nvd
OSV	CVE-2022-2213	27 Jun 202207:15	–	osv
Prion	Cross site scripting	27 Jun 202207:15	–	prion
Rapid7 Vulnerability Database (full)	CVE-2022-2213: Improper Neutralization of Input During Web Page Generation	27 Jun 202200:00	–	rapid7
RedhatCVE	CVE-2022-2213	23 May 202501:07	–	redhatcve
Vulnrichment	CVE-2022-2213 SourceCodester Library Management System cross site scripting	27 Jun 202206:45	–	vulnrichment

NVD

Vulners

Node

library_management_system_project library_management_systemMatch1.0

[
  {
    "product": "Library Management System",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/CyberThoth/CVE/blob/main/CVE/Library%20Management%20System%20with%20QR%20code%20Attendance/Cross%20Site%20Scripting%28Stored%29/POC.md

Parameter	Position	Path	Description	CWE
Name	request body	/admin/edit_admin_details.php?id=admin	Cross-site scripting (XSS) via the Name parameter in /admin/edit_admin_details.php?id=admin.	CWE-79