Lucene search
MitreCVE-2022-46096HistoryDec 21, 2022 - 7:15 p.m.
CVE-2022-46096
2022-12-2119:15:14
CWE-79
mitre
web.nvd.nist.gov
33
cve-2022-46096
cross site scripting
xss
sourcecodester
online
covid-19 directory
vaccination system
nvd
security vulnerability
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
34.6%
A Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on Vaccination System v1.0 allows attackers to execute arbitrary code via the txtfullname parameter or txtphone parameter to register.php without logging in.
Affected configurations
Node
covid-19_directory_on_vaccination_system_projectcovid-19_directory_on_vaccination_systemMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| covid-19_directory_on_vaccination_system_project | covid-19_directory_on_vaccination_system | 1.0 | cpe:2.3:a:covid-19_directory_on_vaccination_system_project:covid-19_directory_on_vaccination_system:1.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2022-46096
2022-12-21 19:15:14
prion
prion
Cross site scripting
2022-12-21 19:15:00
cvelist
cvelist
CVE-2022-46096
2022-12-21 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
34.6%
Related for CVE-2022-46096