CVE-2023-7050

🗓️ 21 Dec 2023 21:31:03Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 42 Views🌐 WEB

A cross-site scripting vulnerability in PHPGurukul Online Notes Sharing System 1.0 allows remote attackers to manipulate user email/name in user/profile.php

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2023-7050	21 Dec 202323:21	–	circl
CNNVD	PHPGurukul Online Notes Sharing System Security Vulnerability	21 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-7050 PHPGurukul Online Notes Sharing System profile.php cross site scripting	21 Dec 202321:31	–	cvelist
EUVD	EUVD-2023-59237	3 Oct 202520:07	–	euvd
NVD	CVE-2023-7050	21 Dec 202322:15	–	nvd
Prion	Cross site scripting	21 Dec 202322:15	–	prion
Positive Technologies	PT-2023-32851 · Unknown · Phpgurukul Online Notes Sharing System	21 Dec 202300:00	–	ptsecurity

NVD

Vulners

Node

phpgurukul online_notes_sharing_systemMatch1.0

[
  {
    "vendor": "PHPGurukul",
    "product": "Online Notes Sharing System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/note_sharing_storedxss..md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
name	request body	user/profile.php	Cross-site scripting via manipulated name/email parameters in user/profile.php	CWE-79
email	request body	user/profile.php	Cross-site scripting via manipulated name/email parameters in user/profile.php	CWE-79

21 Nov 2024 08:45Current

4.4Medium risk

Vulners AI Score4.4

CVSS 3.13.5 - 5.4

CVSS 24

CVSS 33.5

EPSS0.00139

CWE-79