Lucene search

[email protected]CVE-2023-23026

HistoryFeb 07, 2023 - 11:15 p.m.

CVE-2023-23026

2023-02-0723:15:09

CWE-79

[email protected]

web.nvd.nist.gov

vulnerability

xss

sourcecodester

sales management system

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

32.2%

JSON

Cross site scripting (XSS) vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the product_name and product_price inputs in file print.php.

CPENameOperatorVersion
simple_sales_management_system_project:simple_sales_management_systemsimple sales management system project simple sales management systemeq1.0

CPE	Name	Operator	Version
simple_sales_management_system_project:simple_sales_management_system	simple sales management system project simple sales management system	eq	1.0

References

gist.github.com/enferas/63b2bc406f50349403029c26683e84ce

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

32.2%

JSON

Related for CVE-2023-23026

prion1 cvelist1