CVE-2023-0563

LOWNuclei

PHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross site scripting

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-0563 has a selected CVSS score of 3.5 (low); EIP currently links 1 Nuclei template.

Description

A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219717 was assigned to this vulnerability.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

Bank Locker Management System

Browse PHPGurukul / Bank Locker Management System
CVE List1.0affected

Nuclei templates

1
ProjectDiscoveryMEDIUMBank Locker Management System - Cross-Site ScriptingCVSS 4.8

A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Impact

Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to session hijacking, defacement, or theft of sensitive information.

Remediation

Upgrade to the latest version to mitigate this vulnerability.

WeaknessesCWE-79
AuthorsHarsh
Template tagscve2023cveblmsxssphpgurukulvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:phpgurukul:bank_locker_management_system:1.0:*:*:*:*:*:*:*
https://vuldb.com/?ctiid.219717 https://nvd.nist.gov/vuln/detail/CVE-2023-0563 https://vuldb.com/?id.219717 https://github.com/ctflearner/ctflearner

Source: ProjectDiscovery

References

4