Cross-Site Scripting Vulnerability in Online Birth Certificate System by Unknown Vendor

CVE-2020-29239

Summary

The Online Birth Certificate System Project version 1.0 is susceptible to a cross-site scripting vulnerability that allows an attacker to inject malicious code through the User Registration section. This exploitation can occur when an administrator accesses the View Detail of Application section in the admin panel, enabling the attacker to steal cookies by leveraging specifically crafted payloads. Such vulnerabilities pose significant risks, particularly in systems handling sensitive user information.

References