CVE-2023-36317

Published: Aug 23, 2023Modified: Jun 17, 2026

4.8

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Exploitability: 1.7 / Impact: 2.7

Source: NVD

Description

Cross Site Scripting (XSS) vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL.

Affected (1)

Products: Oretnom23: Student Study Center Desk Management System

Oretnom23

1 product

Student Study Center Desk Management System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Oretnom23 Student Study Center Desk Management System	Version 1.0

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (6)

https://github.com/oye-ujjwal/CVE/blob/main/CVE-2023-36317

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.sourcecodester.com

Source: cve@mitre.org

Not Applicable

https://www.sourcecodester.com/php/16298/student-study-center-desk-management-system-using-php-oop-and-mysql-db-free-source-code

Source: cve@mitre.org

Product

https://github.com/oye-ujjwal/CVE/blob/main/CVE-2023-36317

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.sourcecodester.com

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

https://www.sourcecodester.com/php/16298/student-study-center-desk-management-system-using-php-oop-and-mysql-db-free-source-code

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.