Lucene search

K
cveVulDBCVE-2022-4253
HistoryDec 01, 2022 - 8:15 a.m.

CVE-2022-4253

2022-12-0108:15:09
CWE-707
VulDB
web.nvd.nist.gov
27
2
cve-2022-4253
sourcecodester
canteen management system
cross site scripting
remote exploit
vdb-214630

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

21.5%

A vulnerability was found in SourceCodester Canteen Management System. It has been declared as problematic. This vulnerability affects the function builtin_echo of the file customer.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-214630 is the identifier assigned to this vulnerability.

Affected configurations

Nvd
Node
canteen_management_system_projectcanteen_management_systemMatch-
VendorProductVersionCPE
canteen_management_system_projectcanteen_management_system-cpe:2.3:a:canteen_management_system_project:canteen_management_system:-:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "SourceCodester",
    "product": "Canteen Management System",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

Social References

More

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

21.5%

Related for CVE-2022-4253