CVE-2022-3505

Опубликовано: 14 окт. 2022

Источник: nvd

CVSS3: 3.5

CVSS3: 5.4

EPSS Низкий

Описание

A vulnerability was found in SourceCodester Sanitization Management System. It has been classified as problematic. Affected is an unknown function of the file /php-sms/admin/. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210840.

Ссылки

https://github.com/Drun1baby/CVE_Pentest/blob/main/Sanitization%20Management%20System%20Project%20CMS/images/reflectedXSS.png
Exploit
Third Party Advisory
https://vuldb.com/?id.210840
Third Party Advisory
https://github.com/Drun1baby/CVE_Pentest/blob/main/Sanitization%20Management%20System%20Project%20CMS/images/reflectedXSS.png
Exploit
Third Party Advisory
https://vuldb.com/?id.210840
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sanitization_management_system_project:sanitization_management_system:-:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00213

Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-707

CWE-79

Связанные уязвимости

GHSA-35v6-pv3q-68m3

CVSS3: 5.4

github

больше 3 лет назад

EPSS

Процентиль: 44%

0.00213

Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-707

CWE-79