Lucene search

CVE-2023-0840

🗓️ 15 Feb 2023 14:13:15Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 26 Views🌐 WEB

PHPCrazy 1.1.1 vulnerability with remote cross site scripting

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2023-0840 PHPCrazy cross site scripting	15 Feb 202313:28	–	cvelist
Vulnrichment	CVE-2023-0840 PHPCrazy cross site scripting	15 Feb 202313:28	–	vulnrichment
Prion	Cross site scripting	15 Feb 202314:15	–	prion
NVD	CVE-2023-0840	15 Feb 202314:15	–	nvd

Nvd

Vulners

Node

phpcrazy_project phpcrazyMatch1.1.1

[
  {
    "vendor": "n/a",
    "product": "PHPCrazy",
    "versions": [
      {
        "version": "1.1.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/whiex/asdaszdfadsaf/blob/main/PHPCrazyCMS%20storage%20CSRF.docx
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
action	query param	/admin/admin.php	Cross Site Scripting vulnerability in username parameter.	CWE-79
mode	query param	/admin/admin.php	Cross Site Scripting vulnerability in username parameter.	CWE-79
user	query param	/admin/admin.php	Cross Site Scripting vulnerability in username parameter.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Feb 2023 14:15Current

4.5Medium risk

Vulners AI Score4.5

CVSS24

CVSS33.5 - 5.4

EPSS0.00069

SSVC

CWE-79