Lucene search

[email protected]CVE-2020-23051

HistoryOct 22, 2021 - 8:15 p.m.

CVE-2020-23051

2021-10-2220:15:10

CWE-79

[email protected]

web.nvd.nist.gov

cve-2020-23051

phpgurukul

user registration

user management system

xss

vulnerabilities

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

35.2%

JSON

Phpgurukul User Registration & User Management System v2.0 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the firstname and lastname parameters of the registration form & loginsystem input fields.

Affected configurations

NVD

Node

user_registration_\&_login_and_user_management_system_with_admin_panel_projectuser_registration_\&_login_and_user_management_system_with_admin_panelMatch2.0

CPENameOperatorVersion
user_registration_\&_login_and_user_management_system_with_admin_panel_project:user_registration_\&_login_and_user_management_system_with_admin_paneluser registration & login and user management system with admin panel project user registration & login and user management system with admin paneleq2.0

CPE	Name	Operator	Version
user_registration_\&_login_and_user_management_system_with_admin_panel_project:user_registration_\&_login_and_user_management_system_with_admin_panel	user registration & login and user management system with admin panel project user registration & login and user management system with admin panel	eq	2.0

References

www.vulnerability-lab.com/get_content.php?id=2216

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

35.2%

JSON

Related for CVE-2020-23051

nvd1 cvelist1 prion1