Lucene search
HistoryNov 01, 2023 - 11:15 p.m.
CVE-2023-45202
open redirect
online examination system
vulnerability
feed.php
crafted url
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
16.9%
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The ‘q’ parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.
Affected configurations
Node
projectworldsonline_examination_systemMatch1.0
Related
cve
cve
CVE-2023-45202
2023-11-01 23:15:07
prion
prion
Open redirect
2023-11-01 23:15:00
cvelist
cvelist
CVE-2023-45202 Online Examination System v1.0 - Multiple Open Redirects
2023-11-01 22:02:45
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
16.9%
Related for NVD:CVE-2023-45202