CVE-2023-1447

Опубликовано: 17 мар. 2023

Источник: nvd

CVSS3: 3.5

CVSS3: 6.1

CVSS2: 4

EPSS Низкий

Описание

A vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker System 1.0. Affected by this issue is some unknown functionality of the file app/?page=medicines/manage_medicine. The manipulation of the argument name/description with the input leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-223292.

Ссылки

https://vuldb.com/?ctiid.223292
Permissions Required
Third Party Advisory
VDB Entry
https://vuldb.com/?id.223292
Permissions Required
Third Party Advisory
VDB Entry
https://vuldb.com/?ctiid.223292
Permissions Required
Third Party Advisory
VDB Entry
https://vuldb.com/?id.223292
Permissions Required
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:medicine_tracker_system_project:medicine_tracker_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 21%

0.00069

Низкий

3.5 Low

CVSS3

6.1 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-6hgj-m62w-qp9h

CVSS3: 6.1

github

почти 3 года назад

A vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker System 1.0. Affected by this issue is some unknown functionality of the file app/?page=medicines/manage_medicine.They. The manipulation of the argument name/description with the input <script>alert('2')</script> leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-223292.

EPSS

Процентиль: 21%

0.00069

Низкий

3.5 Low

CVSS3

6.1 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79