Lucene search
HistoryDec 07, 2023 - 7:15 a.m.
CVE-2023-48206
cve-2023-48206
cross site scripting
xss
gaatitrack courier management system 1.0
nvd
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
28.6%
A Cross Site Scripting (XSS) vulnerability in GaatiTrack Courier Management System 1.0 allows a remote attacker to inject JavaScript via the page parameter to login.php or header.php.
Affected configurations
Node
mayurikcourier_management_systemMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| mayurik:courier_management_system | mayurik courier management system | eq | 1.0 |
References
Related
nvd
nvd
CVE-2023-48206
2023-12-07 07:15:09
cvelist
cvelist
CVE-2023-48206
2023-12-07 00:00:00
packetstorm
packetstorm
GaatiTrack Courier Management System 1.0 Cross Site Scripting
2023-11-20 00:00:00
prion
prion
Cross site scripting
2023-12-07 07:15:00
zdt
zdt
GaatiTrack Courier Management System 1.0 Cross Site Scripting Vulnerability
2023-11-20 00:00:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
28.6%
Related for CVE-2023-48206