CVE-2023-5697: fallo de gravedad baja en CodeAstro Internet Banking System
CodeAstro Internet Banking System pages_withdraw_money.php cross site scripting
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 3.5epss 0.6%
A vulnerability classified as problematic has been found in CodeAstro Internet Banking System 1.0. This affects an unknown part of the file pages_withdraw_money.php. The manipulation of the argument account_number with the input 287359614--><ScRiPt%20>alert(1234)</ScRiPt><!-- leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243135.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Productos afectados
CodeAstro · Internet Banking SystemCVEs relacionadas — CodeAstro Internet Banking System
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-5693MEDIUMCodeAstro Internet Banking System pages_reset_pwd.php sql injectionEPSS 0.7%CVE-2024-0194MEDIUMCodeAstro Internet Banking System Profile Picture pages_account.php unrestricted uploadEPSS 0.7%CVE-2024-0773LOWCodeAstro Internet Banking System pages_client_signup.php cross site scriptingEPSS 0.6%CVE-2023-5699LOWCodeAstro Internet Banking System pages_view_client.php cross site scriptingEPSS 0.6%CVE-2023-5698LOWCodeAstro Internet Banking System pages_deposit_money.php cross site scriptingEPSS 0.6%CVE-2023-5695LOWCodeAstro Internet Banking System pages_reset_pwd.php cross site scriptingEPSS 0.6%