Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-46020
HistoryNov 13, 2023 - 12:00 a.m.

CVE-2023-46020

2023-11-1300:00:00
mitre
github.com
cross site scripting
code-projects
blood bank
update profile
arbitrary code

AI Score

6.4

Confidence

High

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the ‘rename’, ‘remail’, ‘rphone’ and ‘rcity’ parameters.

AI Score

6.4

Confidence

High

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-46020