Описание
Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:php_crud_without_refresh\/reload_using_ajax_and_datatables_tutorial_project:php_crud_without_refresh\/reload_using_ajax_and_datatables_tutorial:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 80%
0.01397
Низкий
9.6 Critical
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
около 4 лет назад
Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud.
EPSS
Процентиль: 80%
0.01397
Низкий
9.6 Critical
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-79