CVE-2023-46980

2023-11-0300:00:00

mitre

www.cve.org

remote code execution

privilege escalation

crafted script

userid parameter

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.9%

JSON

An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter.

References

github.com/sajaljat/CVE-2023-46980/tree/main

youtu.be/3Mz2lSElg7Y