PT-2023-17285 · Unknown · Sourcecodester Online Payroll System

CVE-2023-1853 · Publicado 2023-04-05 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Online Payroll System version 1.0

Description A problematic issue has been found in the processing of the file /admin/employee edit.php, allowing for cross site scripting through the manipulation of an argument. This issue can be exploited remotely.

Recommendations For SourceCodester Online Payroll System version 1.0, consider restricting access to the /admin/employee edit.php file until a patch is available. As a temporary workaround, avoid using the argument that leads to cross site scripting in the affected file.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-1853

Produtos afetados

Sourcecodester Online Payroll System

Referências · 6

• 🔥 https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%209.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2023-1853 · Aviso do Fabricante
• https://t.me/cibsecurity/61435 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-1853 · Nota de Segurança
• https://vuldb.com/?ctiid.224993 · Nota
• https://vuldb.com/?id.224993 · Nota