CVE-2023-2814

🗓️ 19 May 2023 16:00:03Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

Vulnerability found in SourceCodester Class Scheduling System 1.0 allows remote attackers to launch cross site scripting attack via manipulation of Academic_Rank argument in /admin/save_teacher.php

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-2814	19 May 202320:33	–	circl
CNNVD	SourceCodester Class Scheduling System 跨站脚本漏洞	19 May 202300:00	–	cnnvd
CNVD	Class Scheduling System Cross-Site Scripting Vulnerability	23 May 202300:00	–	cnvd
Cvelist	CVE-2023-2814 SourceCodester Class Scheduling System POST Parameter save_teacher.php cross site scripting	19 May 202316:00	–	cvelist
EUVD	EUVD-2023-34267	3 Oct 202520:07	–	euvd
NVD	CVE-2023-2814	19 May 202317:15	–	nvd
OSV	CVE-2023-2814	19 May 202317:15	–	osv
Prion	Cross site scripting	19 May 202317:15	–	prion
Positive Technologies	PT-2023-21588 · Sourcecodester · Sourcecodester Class Scheduling System	19 May 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-2814	23 May 202503:35	–	redhatcve

NVD

Vulners

Node

class_scheduling_system_project class_scheduling_systemMatch1.0

[
  {
    "vendor": "SourceCodester",
    "product": "Class Scheduling System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "modules": [
      "POST Parameter Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/jiy2020/bugReport/blob/main/XSS.md

Parameter	Position	Path	Description	CWE
Academic_Rank	request body	admin/save_teacher.php	Cross-site scripting via manipulated Academic_Rank parameter in /admin/save_teacher.php (POST)	CWE-79

21 Nov 2024 07:59Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.13.5 - 6.1

CVSS 24

CVSS 33.5

EPSS0.0025

CWE-79