A vulnerability was found in Bdtask Hospita AutoManager up to 20240223 and classified as problematic. This issue affects some unknown processing of the file /hospital_activities/birth/form of the component Hospital Activities Page. The manipulation of the argument Description with the input <img src=a onerror=alert(1)> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255497 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://drive.google.com/file/d/1zi8r84r0B2F45rWSYohZ6TO-PzyNJhnG/view?usp=drivesdk | Exploit |
| https://vuldb.com/?ctiid.255497 | Permissions Required VDB Entry |
| https://vuldb.com/?id.255497 | Third Party Advisory VDB Entry |
| https://drive.google.com/file/d/1zi8r84r0B2F45rWSYohZ6TO-PzyNJhnG/view?usp=drivesdk | Exploit |
| https://vuldb.com/?ctiid.255497 | Permissions Required VDB Entry |
| https://vuldb.com/?id.255497 | Third Party Advisory VDB Entry |
Configurations
History
10 Oct 2025, 14:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://drive.google.com/file/d/1zi8r84r0B2F45rWSYohZ6TO-PzyNJhnG/view?usp=drivesdk - Exploit | |
| References | () https://vuldb.com/?ctiid.255497 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.255497 - Third Party Advisory, VDB Entry | |
| First Time |
Bdtask hospital Automanager
Bdtask |
|
| CPE | cpe:2.3:a:bdtask:hospital_automanager:*:*:*:*:*:*:*:* |
Information
Published : 2024-03-03 03:15
Updated : 2025-10-10 14:37
NVD link : CVE-2024-2135
Mitre link : CVE-2024-2135
CVE.ORG link : CVE-2024-2135
JSON object : View
Products Affected
bdtask
- hospital_automanager
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')