CVE-2023-0527

LOW NUCLEI

PHPGurukul Online Security Guards Hiring System 1.0 - Cross-Site Scripting via search-request.php searchdata Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-0527. PoCs published by AFFAN AHMED. A Nuclei detection template is also available.

AI-analyzed exploit summary This exploit demonstrates a reflected XSS vulnerability in Online Security Guards Hiring System 1.0 by injecting a malicious script into the adminname parameter. It automates the login process and payload delivery to trigger the XSS.

Description

A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file search-request.php. The manipulation of the argument searchdata with the input "><script>alert(document.domain)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219596.

Exploits (1)

exploitdb WORKING POC VERIFIED
by AFFAN AHMED · pythonwebappsphp
https://www.exploit-db.com/exploits/51494

This exploit demonstrates a reflected XSS vulnerability in Online Security Guards Hiring System 1.0 by injecting a malicious script into the adminname parameter. It automates the login process and payload delivery to trigger the XSS.

Classification
Working Poc 95%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Online Security Guards Hiring System 1.0
Auth required
Prerequisites: Admin credentials · Access to the admin login page
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Nuclei Templates (1)

Online Security Guards Hiring System - Cross-Site Scripting
MEDIUMVERIFIEDby Harsh

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.219596
Permissions Required, Third Party Advisory, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.219596

Scores

CVSS v3 3.5
EPSS 0.0617
EPSS Percentile 92.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
online_security_guards_hiring_system_project/online_security_guards_hiring_system 1.0
Published Jan 27, 2023
Tracked Since Feb 18, 2026