CVE-2023-1686

Опубликовано: 29 мар. 2023

Источник: nvd

CVSS3: 3.5

CVSS3: 6.1

CVSS2: 4

EPSS Низкий

Описание

A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file bsenordering/admin/category/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224243.

Ссылки

https://github.com/Apeng96/bug_report/blob/main/XSS-1.md
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.224243
Third Party Advisory
https://vuldb.com/?id.224243
Third Party Advisory
https://github.com/Apeng96/bug_report/blob/main/XSS-1.md
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.224243
Third Party Advisory
https://vuldb.com/?id.224243
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:young_entrepreneur_e-negosyo_system_project:young_entrepreneur_e-negosyo_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 22%

0.0007

Низкий

3.5 Low

CVSS3

6.1 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-28xp-c478-9qjp

CVSS3: 6.1

github

больше 2 лет назад

A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file bsenordering/admin/category/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input <script>alert(233)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224243.

EPSS

Процентиль: 22%

0.0007

Низкий

3.5 Low

CVSS3

6.1 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79