CVE-2022-29005

MediumCVSS 6.1/10Last modified Jul 9, 2026

Description

Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/sudoninja-noob/CVE-2022-29005/blob/main/CVE-2022-29005.txtThird Party Advisory
https://phpgurukul.com/online-birth-certificate-system-using-php-and-mysql/Product
https://github.com/sudoninja-noob/CVE-2022-29005/blob/main/CVE-2022-29005.txtThird Party Advisory
https://phpgurukul.com/online-birth-certificate-system-using-php-and-mysql/Product

Timeline

Published: May 23, 2022
Last modified: Jul 9, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-290069.8Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allow CVE-2022-290079.8Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 CVE-2022-290086.5An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to acce CVE-2022-290099.8Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v CVE-2022-29017.1Improper Authorization in GitHub repository chatwoot/chatwoot prior to 2.8.CVE-2022-290139.8A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commands CVE-2022-290147.5A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to read arbitrary files.CVE-2022-290175.5Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x86_64/multiarch/strlen-avx2.S.CVE-2022-290206.1ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar.CVE-2022-290219.8A buffer overflow vulnerability exists in the razerkbd driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of Servic CVE-2022-290229.8A buffer overflow vulnerability exists in the razeraccessory driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of CVE-2022-290239.8A buffer overflow vulnerability exists in the razermouse driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of Serv