Описание
A vulnerability classified as problematic was found in SourceCodester Online Railway Reservation System 1.0. This vulnerability affects unknown code of the file contact_us.php of the component Message Us Form. The manipulation of the argument fullname/email/message leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Ссылки
- ExploitThird Party Advisory
- Permissions Required
- Third Party Advisory
- Third Party Advisory
- Product
Уязвимые конфигурации
EPSS
4.3 Medium
CVSS3
6.1 Medium
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
A vulnerability classified as problematic was found in SourceCodester Online Railway Reservation System 1.0. This vulnerability affects unknown code of the file contact_us.php of the component Message Us Form. The manipulation of the argument fullname/email/message leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
EPSS
4.3 Medium
CVSS3
6.1 Medium
CVSS3
5 Medium
CVSS2