漏洞描述
Online Birth Certificate System 1.2 contains multiple stored cross-site scripting vulnerabilities in the component /obcs/user/profile.php, which allows an attacker to execute arbitrary web script or HTML via a crafted payload injected into the fname or lname parameters.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
github.comhttps://github.com/sudoninja-noob/CVE-2022-29005/blob/main/CVE-2022-29005.txt↗phpgurukul.comhttps://phpgurukul.com/online-birth-certificate-system-using-php-and-mysql/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2022-29005↗online.comhttp://online.com↗github.comhttps://github.com/ARPSyndicate/kenzer-templates↗