CVE-2022-46095

CVSS V2 None CVSS V3 None
Description
Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting (XSS) vulnerability via verification.php because the program does not verify the txtvaccinationID parameter.
Overview
  • CVE ID
  • CVE-2022-46095
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-21T19:15:14
  • Last Modified Date
  • 2022-12-28T20:39:26
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:covid-19_directory_on_vaccination_system_project:covid-19_directory_on_vaccination_system:1.0:*:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/covid-19-vaccination-poc/covid-19-vaccination.md
https://www.sourcecodester.com/php/15244/design-and-implementation-covid-19-directory-vacination.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-46095
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46095
History
Created Old Value New Value Data Type Notes
2022-12-21 20:16:25 Added to TrackCVE
2022-12-22 18:18:32 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2022-12-28 21:14:47 2022-12-28T20:39:26 CVE Modified Date updated
2022-12-28 21:14:47 Undergoing Analysis Analyzed Vulnerability Status updated
2022-12-28 21:14:48 Weakness Enumeration new
2022-12-28 21:14:48 CPE Information updated