CVE-2023-5302

Published: Sep 30, 2023Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Courier Management System 1.0. This issue affects some unknown processing of the component Manage Account Page. The manipulation of the argument First Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240941 was assigned to this vulnerability.

Affected (1)

Products: Mayurik: Best Courier Management System

1 product

Best Courier Management System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mayurik Best Courier Management System	Version 1.0

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (6)

https://github.com/rohit0x5/poc/blob/main/cve_2

Source: cna@vuldb.com

ExploitThird Party Advisory

https://vuldb.com/?ctiid.240941

Source: cna@vuldb.com

Permissions RequiredThird Party AdvisoryVDB Entry

https://vuldb.com/?id.240941

Source: cna@vuldb.com

Permissions RequiredThird Party AdvisoryVDB Entry

https://github.com/rohit0x5/poc/blob/main/cve_2

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://vuldb.com/?ctiid.240941

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party AdvisoryVDB Entry

https://vuldb.com/?id.240941

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party AdvisoryVDB Entry

Timeline

No history available yet.