cve/2024/CVE-2024-2997.md

### [CVE-2024-2997](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2997)
![](https://img.shields.io/static/v1?label=Product&message=Multi-Store%20Inventory%20Management%20System&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%2020240320%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross%20Site%20Scripting&color=brighgreen)

### Description

A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Category Name/Model Name/Brand Name/Unit Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258199. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/Srivishnu-p/CVEs-and-Vulnerabilities
- https://github.com/fkie-cad/nvd-json-data-feeds
- https://github.com/nomi-sec/PoC-in-GitHub
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00			`### [CVE-2024-2997](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2997)`
			`![](https://img.shields.io/static/v1?label=Product&message=Multi-Store%20Inventory%20Management%20System&color=blue)`
			`![](https://img.shields.io/static/v1?label=Version&message=%3D%2020240320%20&color=brighgreen)`
			`![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross%20Site%20Scripting&color=brighgreen)`

			`### Description`

			A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Category Name/Model Name/Brand Name/Unit Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258199. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

			`### POC`

			`#### Reference`
			`No PoCs from references.`

			`#### Github`
			`- https://github.com/Srivishnu-p/CVEs-and-Vulnerabilities`
			`- https://github.com/fkie-cad/nvd-json-data-feeds`
Update CVE sources 2024-08-05 18:41 2024-08-05 18:41:32 +00:00			`- https://github.com/nomi-sec/PoC-in-GitHub`
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00