PT-2022-10910 · Unknown · Online Student Rate System

Stefan Dorresteijn · Published 2022-06-24 · Updated 2022-06-30 · CVE-2021-39408

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Online Student Rate System version 1.0

Description A Cross Site Scripting (XSS) issue exists via the page parameter on the "index.php" file. This allows for potential malicious script execution.

Recommendations For Online Student Rate System version 1.0, consider validating and sanitizing the page parameter in the "index.php" file to prevent XSS attacks. As a temporary workaround, restrict access to the "index.php" file until a proper fix is applied.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-39408

Affected Products

Online Student Rate System

References · 6

• 🔥 https://github.com/StefanDorresteijn/CVE-2021-39408 · Exploit
• https://osv.dev/vulnerability/CVE-2021-39408 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-39408 · Security Note
• https://t.me/cvenotify/32112 · Telegram Post
• https://t.me/cibsecurity/45109 · Telegram Post
• https://t.me/cvenotify/32138 · Telegram Post