Lucene search

[email protected]CVE-2020-24723

HistoryNov 18, 2020 - 1:15 p.m.

CVE-2020-24723

2020-11-1813:15:11

CWE-79

[email protected]

web.nvd.nist.gov

cve-2020-24723

cross site scripting

xss

admin panel

phpgurukul user registration

user management system

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

27.0%

JSON

Cross Site Scripting (XSS) vulnerability in the Registration page of the admin panel in PHPGurukul User Registration & Login and User Management System With admin panel 2.1.

Affected configurations

NVD

Node

user_registration_\&_login_and_user_management_system_projectuser_registration_\&_login_and_user_management_systemMatch2.1

CPENameOperatorVersion
user_registration_\&_login_and_user_management_system_project:user_registration_\&_login_and_user_management_systemuser registration & login and user management system project user registration & login and user management systemeq2.1

CPE	Name	Operator	Version
user_registration_\&_login_and_user_management_system_project:user_registration_\&_login_and_user_management_system	user registration & login and user management system project user registration & login and user management system	eq	2.1

References

phpgurukul.com/

systemweakness.com/cve-2020-24723-89ea76588286

th3cyb3rc0p.medium.com/cve-2020-24723-89ea76588286

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

27.0%

JSON

Related for CVE-2020-24723

checkpoint_advisories1 cvelist1 nvd1 prion1