Vulners
Lucene search
CVE-2025-0844
๐๏ธย 29 Jan 2025ย 23:31:04Reported byย VulDBTypeย 
ย cve๐ย web.nvd.nist.gov๐ย 49ย Views๐ WEB
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | CVE-2025-0844 | 29 Jan 202523:34 | โ | circl |
 | needyamin ่ทจ็ซ่ๆฌๆผๆด | 30 Jan 202500:00 | โ | cnnvd |
 | CVE-2025-0844 needyamin Library Card System Registration Page signup.php cross site scripting | 29 Jan 202523:31 | โ | cvelist |
 | EUVD-2025-1893 | 3 Oct 202520:07 | โ | euvd |
 | CVE-2025-0844 | 30 Jan 202500:15 | โ | nvd |
 | CVE-2025-0844 | 30 Jan 202500:15 | โ | osv |
 | PT-2025-4070 ยท Unknown ยท Needyamin Library Card System | 29 Jan 202500:00 | โ | ptsecurity |
 | CVE-2025-0844 | 23 May 202511:57 | โ | redhatcve |
 | CVE-2025-0844 needyamin Library Card System Registration Page signup.php cross site scripting | 29 Jan 202523:31 | โ | vulnrichment |
Node
[
{
"vendor": "needyamin",
"product": "Library Card System",
"versions": [
{
"version": "1.0",
"status": "affected"
}
],
"modules": [
"Registration Page"
]
}
]| Source | Link |
|---|---|
| websecurityinsights | www.websecurityinsights.my.id/2025/01/library-card-system-stored-cross-site.html |
| vuldb | www.vuldb.com/ |
| vuldb | www.vuldb.com/ |
| vuldb | www.vuldb.com/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| firstname | request body | signup.php | Cross-site scripting in signup.php via unsanitized input fields (firstname, lastname, email, borrow, user_address) leading to XSS. | CWE-79,ย CWE-94 |
| lastname | request body | signup.php | Cross-site scripting in signup.php via unsanitized input fields (firstname, lastname, email, borrow, user_address) leading to XSS. | CWE-79,ย CWE-94 |
| request body | signup.php | Cross-site scripting in signup.php via unsanitized input fields (firstname, lastname, email, borrow, user_address) leading to XSS. | CWE-79,ย CWE-94 | |
| borrow | request body | signup.php | Cross-site scripting in signup.php via unsanitized input fields (firstname, lastname, email, borrow, user_address) leading to XSS. | CWE-79,ย CWE-94 |
| user_address | request body | signup.php | Cross-site scripting in signup.php via unsanitized input fields (firstname, lastname, email, borrow, user_address) leading to XSS. | CWE-79,ย CWE-94 |
Data
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Feb 2025 17:17Current
4.4Medium risk
Vulners AI Score4.4
CVSS 3.14.3 - 6.1
CVSS 25
CVSS 46.9
CVSS 34.3
EPSS0.00204
SSVC