CVE-2022-2682

Опубликовано: 05 авг. 2022

Источник: nvd

CVSS3: 3.5

CVSS3: 5.4

EPSS Низкий

Описание

A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System. Affected by this issue is some unknown functionality of the file stockin.php. The manipulation of the argument id with the input '"> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-205670 is the identifier assigned to this vulnerability.

Ссылки

https://github.com/895515845/Alphaware-E-Commerce-System/blob/main/Alphaware_xss.md
Exploit
Third Party Advisory
https://vuldb.com/?id.205670
Third Party Advisory
VDB Entry
https://github.com/895515845/Alphaware-E-Commerce-System/blob/main/Alphaware_xss.md
Exploit
Third Party Advisory
https://vuldb.com/?id.205670
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:alphaware_-_simple_e-commerce_system_project:alphaware_-_simple_e-commerce_system:-:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00212

Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-92xr-fx43-q8fp

CVSS3: 5.4

github

больше 3 лет назад

A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System. Affected by this issue is some unknown functionality of the file stockin.php. The manipulation of the argument id with the input '"><script>alert(/xss/)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-205670 is the identifier assigned to this vulnerability.

EPSS

Процентиль: 44%

0.00212

Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79