PT-2019-15398 · Sourcecodester · Sourcecodester Restaurant Management System

Publicado 2019-10-24 · Atualizado 2019-10-28 · CVE-2019-18415

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sourcecodester Restaurant Management System version 1.0

Description The issue allows for cross-site scripting (XSS) attacks through the "send a message" screen. This means an attacker could potentially inject malicious scripts into the website, affecting users who interact with the vulnerable page.

Recommendations For Sourcecodester Restaurant Management System version 1.0, consider disabling the "send a message" feature until a patch is available to prevent XSS attacks. Restrict access to this feature to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-18415

Produtos afetados

Sourcecodester Restaurant Management System

Referências · 3

• 🔥 https://sevenlayers.com/index.php/264-restaurant-management-system-1-0-xss-session-hijack · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-18415 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-18415 · Aviso do Fabricante