PT-2023-25747 · Unknown · Phpgurukul Online Fire Reporting System

CVE-2023-36941 · Publicado 2023-07-27 · Atualizado 2023-12-21

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Fire Reporting System Using PHP and MySQL version 1.2

Description A cross-site scripting (XSS) issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields.

Recommendations For PHPGurukul Online Fire Reporting System Using PHP and MySQL version 1.2, consider validating and sanitizing user input for the team name, leader, and member fields to prevent the injection of malicious payloads. As a temporary workaround, restrict access to these fields until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-36941

Produtos afetados

Phpgurukul Online Fire Reporting System

Referências · 6

• 🔥 https://medium.com/%40ridheshgohil1092/cve-2023-36941-xss-on-online-fire-reporting-system-v-1-2-df84d7ac3fd1 · Exploit
• 🔥 https://medium.com/@ridheshgohil1092/cve-2023-36941-xss-on-online-fire-reporting-system-v-1-2-df84d7ac3fd1 · Exploit
• https://packetstormsecurity.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-36941 · Nota de Segurança
• https://t.me/cibsecurity/67349 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-36941 · Aviso do Fabricante