CVE-2024-4075

Опубликовано: 23 апр. 2024

Источник: nvd

CVSS3: 3.5

CVSS3: 6.1

CVSS2: 4

EPSS Низкий

Описание

A vulnerability classified as problematic has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file login.php. The manipulation of the argument txtAddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-261801 was assigned to this vulnerability.

Ссылки

https://github.com/E1CHO/cve_hub/blob/main/Online%20Furniture%20Shopping%20Ecommerce%20Website/Online%20Furniture%20Shopping%20Ecommerce%20Website%20Project%20-%20vuln%207.pdf
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.261801
Permissions Required
VDB Entry
https://vuldb.com/?id.261801
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.321451
Exploit
Third Party Advisory
VDB Entry
https://github.com/E1CHO/cve_hub/blob/main/Online%20Furniture%20Shopping%20Ecommerce%20Website/Online%20Furniture%20Shopping%20Ecommerce%20Website%20Project%20-%20vuln%207.pdf
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.261801
Permissions Required
VDB Entry
https://vuldb.com/?id.261801
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.321451
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:aditya88:online_furniture_shopping_ecommerce_website:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 29%

0.00107

Низкий

3.5 Low

CVSS3

6.1 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-p37h-v38c-f75w

CVSS3: 3.5

github

почти 2 года назад

EPSS

Процентиль: 29%

0.00107

Низкий

3.5 Low

CVSS3

6.1 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79