CVE-2023-5695

CodeAstro Internet Banking System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the pages_reset_pwd.php file. The issue arises from manipulating the email parameter with crafted input (e.g., testing%40example.com'%26%25alert(9860)), which can be exploited remotely. The vulnerab...

CVE-2023-5695 CodeAstro Internet Banking System pages_reset_pwd.php cross site scripting

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file pagesresetpwd.php. The manipulation of the argument email with the input testing%40example.com'%26%25alert9860 leads to...