Lucene search

[email protected]CVE-2021-40909

HistoryJan 24, 2022 - 4:15 p.m.

CVE-2021-40909

2022-01-2416:15:08

CWE-89

CWE-79

[email protected]

web.nvd.nist.gov

xss

vulnerability

sourcecodester

php

crud

ajax

datatables

tutorial

remote code execution

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON

Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud.

Affected configurations

NVD

Node

php_crud_without_refresh\/reload_using_ajax_and_datatables_tutorial_projectphp_crud_without_refresh\/reload_using_ajax_and_datatables_tutorialMatch1.0

CPENameOperatorVersion
php_crud_without_refresh\/reload_using_ajax_and_datatables_tutorial_project:php_crud_without_refresh\/reload_using_ajax_and_datatables_tutorialphp crud without refresh/reload using ajax and datatables tutorial project php crud without refresh/reload using ajax and datatables tutorialeq1.0

CPE	Name	Operator	Version
php_crud_without_refresh\/reload_using_ajax_and_datatables_tutorial_project:php_crud_without_refresh\/reload_using_ajax_and_datatables_tutorial	php crud without refresh/reload using ajax and datatables tutorial project php crud without refresh/reload using ajax and datatables tutorial	eq	1.0

References

github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-10-09102021

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON

Related for CVE-2021-40909

cnvd1 cvelist1 nvd1 prion1