ORETNOM23 Online Birth Certificate Management System vulnerabilities

5 CVEs affecting ORETNOM23 Online Birth Certificate Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-5045, published 2024-05-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-5045, published 2024-05-17. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Online Birth Certificate Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin. The…
CVE-2022-42067, published 2022-10-14. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerability
CVE-2022-42071, published 2022-10-14. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. Online Birth Certificate Management System version 1.0 suffers from a Cross Site Scripting (XSS) Vulnerability.
CVE-2022-42070, published 2022-10-14. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Online Birth Certificate Management System version 1.0 is vulnerable to Cross Site Request Forgery (CSRF).
CVE-2022-42069, published 2022-10-14. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. Online Birth Certificate Management System version 1.0 suffers from a persistent Cross Site Scripting (XSS) vulnerability.