{"id":"CVE-2024-3612","aliases":["EUVD-2024-32191","GHSA-p8qj-j5r9-6rcf"],"status":"published","title":"SourceCodester Warehouse Management System barang.php cross site scripting","description":"A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file barang.php. The manipulation of the argument nama_barang/merek leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260269 was assigned to this vulnerability.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0055,"percentile":0.46273,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2024-04-10T23:31:04Z","modified":"2026-06-17T07:44:37Z","products":[{"vendor":"oretnom23","product":"warehouse_management_system"},{"vendor":"sourcecodester","product":"warehouse management system"}],"references":[{"url":"https://vuldb.com/?id.260269","tags":["vdb-entry","technical-description","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/?ctiid.260269","tags":["signature","permissions-required","x_transferred","Permissions Required","VDB Entry"]},{"url":"https://vuldb.com/?submit.312700","tags":["third-party-advisory","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/fubxx/CVE/blob/main/WarehouseManagementSystemXSS.md","tags":["exploit","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3612"},{"url":"https://github.com/advisories/GHSA-p8qj-j5r9-6rcf"}],"sources":{"cve":[{"id":"CVE-2024-3612","title":"SourceCodester Warehouse Management System barang.php cross site scripting","description":"A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file barang.php. The manipulation of the argument nama_barang/merek leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260269 was assigned to this vulnerability.","status":"published","published":"2024-04-10T23:31:04.256Z","modified":"2024-08-01T20:19:59.894Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"},{"version":"3.0","score":3.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:10.258163Z"}],"euvd":[{"id":"EUVD-2024-32191","description":"A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file barang.php. The manipulation of the argument nama_barang/merek leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260269 was assigned to this vulnerability.","status":"published","published":"2024-04-10T23:31:04Z","modified":"2024-08-01T20:19:59Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T03:50:38.460826Z"}],"ghsa":[{"id":"GHSA-p8qj-j5r9-6rcf","title":"A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared...","description":"A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file barang.php. The manipulation of the argument nama_barang/merek leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260269 was assigned to this vulnerability.","status":"published","published":"2024-04-11T00:30:36Z","modified":"2024-04-11T00:30:42Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:57:05.919117Z"}],"nvd":[{"id":"CVE-2024-3612","description":"A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file barang.php. The manipulation of the argument nama_barang/merek leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260269 was assigned to this vulnerability.","status":"published","published":"2024-04-11T00:15:07.393Z","modified":"2026-06-17T07:44:37.83Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:09:49.255123Z"}]}}