Lucene search

K
nvd[email protected]NVD:CVE-2023-46505
HistoryOct 27, 2023 - 1:15 a.m.

CVE-2023-46505

2023-10-2701:15:32
CWE-79
web.nvd.nist.gov
1
cve-2023-46505
fancms
cross site scripting
arbitrary code
demo.php

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

19.8%

Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php file.

Affected configurations

Nvd
Node
pwncynfancmsMatch1.0
VendorProductVersionCPE
pwncynfancms1.0cpe:2.3:a:pwncyn:fancms:1.0:*:*:*:*:*:*:*

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

19.8%

Related for NVD:CVE-2023-46505