CVE-2023-39115

🗓️ 16 Aug 2023 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 33 Views🌐 WEB

CVE-2023-39115 XSS in Campcodes Online Matrimonial Website System Script 3.

Reporter	Title	Published	Views	Family All 14
0day.today	Campcodes Online Matrimonial Website System v3.3 - Code Execution via malicious SVG file upload	4 Aug 202300:00	–	zdt
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Campcodes Complete_Online_Matrimonial_Website_System_Script	7 Aug 202316:04	–	githubexploit
ATTACKERKB	CVE-2023-39115	16 Aug 202315:15	–	attackerkb
Circl	CVE-2023-39115	16 Aug 202322:50	–	circl
CNNVD	Campcodes Online Matrimonial Website System Code Issue Vulnerability	4 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-39115	16 Aug 202300:00	–	cvelist
Exploit DB	Campcodes Online Matrimonial Website System v3.3 - Code Execution via malicious SVG file upload	4 Aug 202300:00	–	exploitdb
EUVD	EUVD-2023-42861	3 Oct 202520:07	–	euvd
NVD	CVE-2023-39115	16 Aug 202315:15	–	nvd
OSV	CVE-2023-39115	16 Aug 202315:15	–	osv

NVD

Node

campcodes complete_online_matrimonial_website_system_scriptMatch3.3

Source	Link
campcodes	www.campcodes.com/projects/php/online-matrimonial-website-system-script-in-php/
packetstormsecurity	www.packetstormsecurity.com/files/173950/Campcodes-Online-Matrimonial-Website-System-3.3-Cross-Site-Scripting.html
github	www.github.com/Raj789-sec/CVE-2023-39115
exploit-db	www.exploit-db.com/exploits/51656

Parameter	Position	Path	Description	CWE
aiz_file	request body	Matrimonial%20Script/install/aiz-uploader/upload	SVG file upload can lead to code execution via crafted SVG payload executed when processed by the upload endpoint.	CWE-434

21 Nov 2024 08:14Current

8.7High risk

Vulners AI Score8.7

CVSS 3.19.8

EPSS0.02212

SSVC

cve-2023-39115 xss campcodes online matrimonial website system script 3.3