PT-2023-27988 · Unknown · Dairy Farm Shop Management System Using Php/Mysql

Shivam Sharma · Publicado 2023-09-11 · Atualizado 2023-09-15 · CVE-2023-41593

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Dairy Farm Shop Management System Using PHP and MySQL version 1.1

Description The issue allows attackers to execute arbitrary web scripts and HTML via a crafted payload injected into the Category and Category Field parameters. This enables the execution of malicious scripts, potentially leading to unauthorized access or data manipulation.

Recommendations For Dairy Farm Shop Management System Using PHP and MySQL version 1.1, consider disabling the Category and Category Field parameters until a patch is available to prevent the injection of crafted payloads. Restrict access to these parameters to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-41593

Produtos afetados

Dairy Farm Shop Management System Using Php/Mysql

Referências · 9

• 🔥 https://github.com/MATRIXDEVIL/CVE/blob/main/CVE-2023-41593 · Exploit
• https://osv.dev/vulnerability/CVE-2023-41593 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1701338086041403473 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1701289313118388374 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-41593 · Nota de Segurança
• https://portswigger.net/web-security/cross-site-scripting · Nota
• https://owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prevention_Cheat_Sheet · Nota
• https://t.me/cibsecurity/70217 · Publicação no Telegram
• https://acunetix.com/websitesecurity/cross-site-scripting · Nota