CVE-2022-4252

Опубликовано: 01 дек. 2022

Источник: nvd

CVSS3: 3.5

CVSS3: 6.1

EPSS Низкий

Описание

A vulnerability was found in SourceCodester Canteen Management System. It has been classified as problematic. This affects the function builtin_echo of the file categories.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214629 was assigned to this vulnerability.

Ссылки

https://blog.csdn.net/weixin_43864034/article/details/128127288
Exploit
Third Party Advisory
https://vuldb.com/?id.214629
Third Party Advisory
https://blog.csdn.net/weixin_43864034/article/details/128127288
Exploit
Third Party Advisory
https://vuldb.com/?id.214629
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:canteen_management_system_project:canteen_management_system:-:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00211

Низкий

3.5 Low

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-707

Связанные уязвимости

GHSA-wmrj-q5cv-w5wg

CVSS3: 6.1

github

около 3 лет назад

EPSS

Процентиль: 43%

0.00211

Низкий

3.5 Low

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-707