Cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Contact Manager App 1.0. This affects an unknown part of the file index.php of the component Contact Information Handler. The manipulation of the argument contactID with the input "alert1 leads to cross site scripting. It ...

CVE-2023-4871

CVE-2023-4871 affects SourceCodester Contact Manager App 1.0, specifically the delete.php file. The vulnerability stems from manipulations of the contact/contactName (or related contactName parameter) enabling SQL injection via remote access. Public exploit information exists, indicating real-wor...