CVE-2023-1131
A vulnerability has been found in SourceCodester Computer Parts Sales and Inventory System 1.0 and classified as problematic.
Does this matter?
Lower severity and a low EPSS score (0.60%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability has been found in SourceCodester Computer Parts Sales and Inventory System 1.0 and classified as problematic. This vulnerability affects unknown code of the file customer.php. The manipulation of the argument FIRST_NAME/LAST_NAME/PHONE_NUMBER leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222106 is the identifier assigned to this vulnerability.
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.60% probability · 47th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- computer parts sales and inventory system project/computer parts sales and inventory system
- Source
- cna@vuldb.com
References
- https://github.com/WhiteA1so/Cvetest/blob/main/1.pdfBroken Link
- https://vuldb.com/?ctiid.222106Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.222106Third Party Advisory, VDB Entry
- https://github.com/WhiteA1so/Cvetest/blob/main/1.pdfBroken Link
- https://vuldb.com/?ctiid.222106Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.222106Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.