CVE-2023-1179: low-severity vulnerability in SourceCodester Computer Parts Sales and…
SourceCodester Computer Parts Sales and Inventory System Add Supplier cross site scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.5epss 0.6%
A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add Supplier Handler. The manipulation of the argument company_name/province/city/phone_number leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222330 is the identifier assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Affected products
SourceCodester · Computer Parts Sales and Inventory SystemRelated CVEs — SourceCodester Computer Parts Sales and…
In the same product, most dangerous first.
CVE-2023-1351MEDIUMSourceCodester Computer Parts Sales and Inventory System cust_transac.php sql injectionEPSS 0.8%CVE-2023-1130MEDIUMSourceCodester Computer Parts Sales and Inventory System processlogin sql injectionEPSS 0.7%CVE-2023-1131LOWSourceCodester Computer Parts Sales and Inventory System customer.php cross site scriptingEPSS 0.6%CVE-2023-1363LOWSourceCodester Computer Parts Sales and Inventory System Add User Account cross site scriptingEPSS 0.6%