CVE-2023-3660

Опубликовано: 13 июл. 2023

Источник: nvd

CVSS3: 2.4

CVSS3: 6.1

CVSS2: 3.3

EPSS Низкий

Описание

A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/add_user_modal.php. The manipulation of the argument un leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-234014 is the identifier assigned to this vulnerability.

Ссылки

https://github.com/E1CHO/cve_hub/blob/main/Retro%20Cellphone%20Online%20Store%20-%20vlun%206.pdf
Not Applicable
https://vuldb.com/?ctiid.234014
Permissions Required
Third Party Advisory
VDB Entry
https://vuldb.com/?id.234014
Permissions Required
Third Party Advisory
VDB Entry
https://github.com/E1CHO/cve_hub/blob/main/Retro%20Cellphone%20Online%20Store%20-%20vlun%206.pdf
Not Applicable
https://vuldb.com/?ctiid.234014
Permissions Required
Third Party Advisory
VDB Entry
https://vuldb.com/?id.234014
Permissions Required
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:retro_cellphone_online_store_project:retro_cellphone_online_store:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 19%

0.0006

Низкий

2.4 Low

CVSS3

6.1 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-56m2-r2h9-j8jx

CVSS3: 2.4

github

больше 2 лет назад

EPSS

Процентиль: 19%

0.0006

Низкий

2.4 Low

CVSS3

6.1 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-79