VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 6, 2024· Updated Aug 6, 2024

Cross-site Scripting in Janobe E-Negosyo System

CVE-2024-33975

Description

Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'view' parameter in '/admin/products/index.php'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Lenovo/System xllm-fuzzy
    Range: =1.0
  • Janobe/E-Negosyo Systemv5
    Range: 1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.