PT-2023-29808 · Unknown · Phpgurukul Teacher Subject Allocation Management System

Ersinerenler · Publicado 2023-11-14 · Atualizado 2023-11-17 · CVE-2023-46026

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions phpgurukul Teacher Subject Allocation Management System version 1.0

Description The issue concerns a Cross Site Scripting (XSS) vulnerability. This vulnerability allows attackers to run arbitrary code via the adminname and email parameters in the profile.php file.

Recommendations For phpgurukul Teacher Subject Allocation Management System version 1.0, consider restricting the input for the adminname and email parameters to prevent the execution of arbitrary code until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-46026

Produtos afetados

Phpgurukul Teacher Subject Allocation Management System

Referências · 3

• 🔥 https://github.com/ersinerenler/phpgurukul-Teacher-Subject-Allocation-Management-System-1.0/blob/main/CVE-2023-46026-PHPGurukul-Teacher-Subject-Allocation-Management-System-1.0-Stored-Cross-Site-Scripting-Vulnerability.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-46026 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-46026 · Aviso do Fabricante