PT-2023-18867 · Unknown · Art Gallery Management System Project

Rahul Patwari · Publicado 2023-02-10 · Atualizado 2023-12-20 · CVE-2023-23161

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Art Gallery Management System Project version 1.0

Description A reflected cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under the ART TYPE option in the navigation bar.

Recommendations For Art Gallery Management System Project version 1.0, avoid using the artname parameter in the affected navigation bar option until the issue is resolved. Consider temporarily restricting access to the ART TYPE option to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-23161

Produtos afetados

Art Gallery Management System Project

Referências · 7

• 🔥 https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23161/CVE-2023-23161.txt · Exploit
• 🔥 https://exploit-db.com/exploits/51214 · Exploit
• https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql · Nota
• https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-23161 · Nota de Segurança
• http://packetstormsecurity.com/files/171642/Art-Gallery-Management-System-Project-1.0-Cross-Site-Scripting.html · Nota
• https://osv.dev/vulnerability/CVE-2023-23161 · Aviso do Fabricante