This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2024-2259 | BDVDB-2026-245239 Detail

Meddiff TechnologiesInstaRISPACS

Description#

This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo parameter in user login module of the web interface of the application. A remote attacker could exploit this vulnerability by sending a specially crafted input to the vulnerable parameter to perform reflected Cross Site Scripting (XSS) attacks on the targeted system.

Impact#

CAPEC-591 Reflected XSS

Weaknesses#

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.