CVE-2023-7136

CVE-2023-7136 affects code-projects Record Management System 1.0, specifically the Document Type Handler’s /main/doctype.php. The vulnerability stems from manipulating the docname parameter with input like >, enabling cross-site scripting. Exploitation is possible remotely and the exploit has ...

CVE-2023-7135

Code-projects Record Management System 1.0 is affected in the Offices Handler, specifically the /main/offices.php file. The vulnerability arises from manipulating the officename parameter with input containing a script tag (e.g., >), leading to cross-site scripting. Attack can be launched remo...