CVE-2023-1485: falha de baixa gravidade em SourceCodester Young Entrepreneur E-Negosyo…
SourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scripting
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.5epss 0.5%
A vulnerability classified as problematic has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file /bsenordering/index.php of the component GET Parameter Handler. The manipulation of the argument category with the input <script>alert(222)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223371.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
SourceCodester · Young Entrepreneur E-Negosyo SystemCVEs relacionadas — SourceCodester Young Entrepreneur E-Negosyo…
No mesmo produto, das mais perigosas para as menos.
CVE-2023-1734HIGHSourceCodester Young Entrepreneur E-Negosyo System unrestricted uploadEPSS 0.6%CVE-2023-1737HIGHSourceCodester Young Entrepreneur E-Negosyo System login.php sql injectionEPSS 0.6%CVE-2023-1686LOWSourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scriptingEPSS 0.5%CVE-2023-1738MEDIUMSourceCodester Young Entrepreneur E-Negosyo System sql injectionEPSS 0.5%CVE-2023-1735MEDIUMSourceCodester Young Entrepreneur E-Negosyo System passwordrecover.php sql injectionEPSS 0.5%CVE-2023-1736MEDIUMSourceCodester Young Entrepreneur E-Negosyo System sql injectionEPSS 0.4%