CVE-2023-1485: fallo de gravedad baja en SourceCodester Young Entrepreneur E-Negosyo…
SourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scripting
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 3.5epss 0.5%
A vulnerability classified as problematic has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file /bsenordering/index.php of the component GET Parameter Handler. The manipulation of the argument category with the input <script>alert(222)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223371.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Productos afectados
SourceCodester · Young Entrepreneur E-Negosyo SystemCVEs relacionadas — SourceCodester Young Entrepreneur E-Negosyo…
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-1734HIGHSourceCodester Young Entrepreneur E-Negosyo System unrestricted uploadEPSS 0.6%CVE-2023-1737HIGHSourceCodester Young Entrepreneur E-Negosyo System login.php sql injectionEPSS 0.6%CVE-2023-1686LOWSourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scriptingEPSS 0.5%CVE-2023-1738MEDIUMSourceCodester Young Entrepreneur E-Negosyo System sql injectionEPSS 0.5%CVE-2023-1735MEDIUMSourceCodester Young Entrepreneur E-Negosyo System passwordrecover.php sql injectionEPSS 0.5%CVE-2023-1736MEDIUMSourceCodester Young Entrepreneur E-Negosyo System sql injectionEPSS 0.4%