CVE-2023-0945 — פרטי פגיעות

תיאור (מקור, אנגלית)

A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input "><img src=x onerror=prompt(document.domain);> leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-221592.

מדדים

CVSS 3.1: 5.4 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CWE: CWE-79

מוצרים מושפעים

mayurik: best pos management system

קישורים

https://vuldb.com/?ctiid.221592 Permissions RequiredThird Party Advisory
https://vuldb.com/?id.221592 Third Party Advisory
https://vuldb.com/?ctiid.221592 Permissions RequiredThird Party Advisory
https://vuldb.com/?id.221592 Third Party Advisory

תיאור (מקור, אנגלית)

מדדים

מוצרים מושפעים

קישורים

נגישות