PT-2023-21640 · Sourcecodester · Sourcecodester Class Scheduling System

Joicygiore · Publicado 2023-05-21 · Atualizado 2025-09-30 · CVE-2023-2826

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Class Scheduling System version 1.0

Description A vulnerability has been found in the SourceCodester Class Scheduling System, affecting the file search teacher result.php of the component POST Parameter Handler. The manipulation of the teacher argument leads to cross-site scripting. The attack can be initiated remotely.

Recommendations For version 1.0, consider disabling the teacher argument in the POST Parameter Handler to minimize the risk of exploitation until a patch is available. Restrict access to the search teacher result.php file to minimize the risk of remote attacks.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-2826

Produtos afetados

Sourcecodester Class Scheduling System

Referências · 8

• 🔥❌ https://github.com/joicygiore/ApplyForCVE/blob/main/XSS.md · Exploit, Deleted
• https://vuldb.com/?id.229612 · Nota
• https://t.me/cibsecurity/64496 · Publicação no Telegram
• https://t.me/cveNotify/136915 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-2826 · Nota de Segurança
• https://t.me/cvenotify/50858 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-2826 · Aviso do Fabricante
• https://vuldb.com/?ctiid.229612 · Nota