CyberRota Analysis
AI-GeneratedA cross-site scripting vulnerability exists in the Online Medicine Delivery System 1.0, specifically within the /index.php?q=orderdetails function, allowing remote attackers to manipulate the 'location' argument. Although the severity is rated low, the publicly available exploit means that organizations using this software should prioritize patching to mitigate potential risks associated with unauthorized script execution. Users of this system, particularly those handling sensitive data, should take immediate action to secure their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of the file /index.php?q=orderdetails. Such manipulation of the argument location leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used.