CVE-2024-33977

CVSS V2 None CVSS V3 None
Description
Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'view' parameter in /admin/orders/index.php'.
Overview
  • CVE ID
  • CVE-2024-33977
  • Assigner
  • INCIBE
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-08-06T10:58:21.857Z
  • Last Modified Date
  • 2024-08-06T15:30:42.583Z
History
Created Old Value New Value Data Type Notes
2024-08-07 13:14:06 Added to TrackCVE