Lucene search

VulDBCVE-2023-2425

HistoryApr 29, 2023 - 8:15 a.m.

CVE-2023-2425

2023-04-2908:15:11

CWE-79

VulDB

web.nvd.nist.gov

cve-2023-2425

sourcecodester

simple student information system

vulnerability

remote attack

cross-site scripting

nvd

vdb-227751

CVSS2

3.3

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:M/C:N/I:P/A:N

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

37.3%

JSON

A vulnerability was found in SourceCodester Simple Student Information System 1.0. It has been classified as problematic. This affects an unknown part of the file /classes/Master.php?f=save_course of the component Add New Course. The manipulation of the argument name with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227751.

Affected configurations

Nvd

Vulners

Node

simple_student_information_system_projectsimple_student_information_systemMatch1.0

VendorProductVersionCPE
simple_student_information_system_projectsimple_student_information_system1.0cpe:2.3:a:simple_student_information_system_project:simple_student_information_system:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
simple_student_information_system_project	simple_student_information_system	1.0	cpe:2.3:a:simple_student_information_system_project:simple_student_information_system:1.0:::::::*

CNA Affected

[
  {
    "vendor": "SourceCodester",
    "product": "Simple Student Information System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "modules": [
      "Add New Course"
    ]
  }
]

References

github.com/sssddc11/bug_report/blob/master/XSS-1.md

vuldb.com/?ctiid.227751

vuldb.com/?id.227751

CVSS2

3.3

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:M/C:N/I:P/A:N

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

37.3%

JSON

Related for CVE-2023-2425