CVE-2024-9805

Summary

CVE-2024-9805 is a newly discovered vulnerability affecting the Blood Bank System 1.0 developed by code-projects. This issue has been classified as problematic and involves a cross-site scripting (XSS) vulnerability in the processing of the file /admin/campsdetails.php. The manipulation of specific arguments, including hospital, address, city, and contact, can be exploited to inject malicious code. The attack can be initiated remotely, making it a significant security concern. The exploit for this vulnerability has been disclosed to the public, increasing the risk of potential attacks. Initial research suggests that the vulnerability affects the "hospital" parameter, but further investigation is required to determine the full extent of the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.