Online Blood Donation Management System v1.0 - Stored Cross-Site Scripting (XSS)

Description

Online Blood Donation Management System v1.0 is vulnerable to a Stored Cross-Site Scripting vulnerability. The 'firstName' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response. The vulnerable code is:

users/register.php:

users/DBConnect.php:

users/member.php:

require_once 'php/DBConnect.php';
$db = new DBConnect();
$users = $db->getUsers();
...
<?php include 'layout/_member_layout.php';

layout/_member_layout.php:

<?php foreach($users as $u): $i++;?>
<tr class="<?php if($i%2==0){echo $bg_background;}else{echo 'bg-danger';} ?>">
 <td><?= $u['first_name']." ".$u['last_name']; ?></td>
 <td><?= $u['email']; ?></td>
 <td><?= $u['dob']; ?></td>
 <td><?= $u['gender']; ?></td>
 <td><?= $u['b_type']; ?></td>
 <td><?= wordwrap($u['address'], 26, '<br>'); ?></td>
 <td><?= $u['city']; ?></td>
 <td><?= $u['mobile']; ?></td>
</tr>

Our security policy

We have reserved the ID CVE-2023-44484 to refer to this issue from now on.

Disclosure policy

System Information

• Version: Online Blood Donation Management System v1.0

• Operating System: Any

Mitigation

There is currently no patch available for this vulnerability.

References

• Vendor page https://projectworlds.in/