CVE-2023-1686: low-severity vulnerability in SourceCodester Young Entrepreneur E-Negosyo…
SourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.5epss 0.5%
A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file bsenordering/admin/category/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input <script>alert(233)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224243.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Affected products
SourceCodester · Young Entrepreneur E-Negosyo SystemRelated CVEs — SourceCodester Young Entrepreneur E-Negosyo…
In the same product, most dangerous first.
CVE-2023-1734HIGHSourceCodester Young Entrepreneur E-Negosyo System unrestricted uploadEPSS 0.6%CVE-2023-1737HIGHSourceCodester Young Entrepreneur E-Negosyo System login.php sql injectionEPSS 0.6%CVE-2023-1485LOWSourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scriptingEPSS 0.5%CVE-2023-1738MEDIUMSourceCodester Young Entrepreneur E-Negosyo System sql injectionEPSS 0.5%CVE-2023-1735MEDIUMSourceCodester Young Entrepreneur E-Negosyo System passwordrecover.php sql injectionEPSS 0.5%CVE-2023-1736MEDIUMSourceCodester Young Entrepreneur E-Negosyo System sql injectionEPSS 0.4%