Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-56253
HistoryAug 10, 2022 - 12:00 a.m.

Online Student Admission System跨站脚本漏洞

2022-08-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Online Student Admission System is an online student admissions system used to computerize all pre- and post-admission activity for an institution. A cross-site scripting vulnerability exists in the Online Student Admission System due to an unknown function in its student user interface edit-profile.php that lacks effective filtering and escaping of user input special strings, which can be exploited by attackers to cause cross-site scripting attacks.

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Related for CNVD-2022-56253