CVE-2023-3184lowCWE-79

CVE-2023-3184: low-severity vulnerability in SourceCodester Sales Tracker Management System

SourceCodester Sales Tracker Management System cross site scripting

Published · Updated

Follow this CVE+ Monitor Sales Tracker Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 2.4epss 2.3%
from disclosure to weapon4 days
Published on NVDJun 9
1st PoC+4d
A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save. The manipulation of the argument firstname/middlename/lastname/username leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231164.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Affected products
SourceCodester · Sales Tracker Management System
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — SourceCodester Sales Tracker Management System

In the same product, most dangerous first.

CVE-2023-1292MEDIUMSourceCodester Sales Tracker Management System Master.php delete_client sql injectionEPSS 0.8%CVE-2023-1291MEDIUMSourceCodester Sales Tracker Management System manage_client.php sql injectionEPSS 0.8%CVE-2023-1290MEDIUMSourceCodester Sales Tracker Management System view_client.php sql injectionEPSS 0.8%CVE-2023-1983MEDIUMSourceCodester Sales Tracker Management System GET Parameter manage_product.php sql injectionEPSS 0.7%CVE-2023-0986MEDIUMSourceCodester Sales Tracker Management System Edit User sql injectionEPSS 0.5%CVE-2023-0999MEDIUMSourceCodester Sales Tracker Management System cross-site request forgeryEPSS 0.5%