Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.1

Online Birth Certificate System v1.2: Malicious Script Execution

CVE-2022-29005 · published 4 years ago
Summary

The Online Birth Certificate System v1.2 has a security flaw that allows hackers to inject malicious code into the system. This can lead to unauthorized access or actions on the system. We recommend updating to the latest version of the system to fix this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
phpgurukul online_birth_certificate_system 1.2
cpe:2.3:a:phpgurukul:online_birth_certificate_system:1.2:*:*:*:*:*:*:*
Original advisory text
Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a c...
Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters.
References
Severity
6.1 Medium
Exploitation
2% chance of attack within 30 days
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published23 May 2022
Updated4 Nov 2026
First seen5 Jul 2026
Sources
CVE-2022-29005 · NVD
CVE-2022-29005 · MITRE
Track software like this
Free during beta