PT-2022-11507 · Sourcecodester · Sourcecodester Electric Billing Management System

Oretnom23 · Published 2022-01-24 · Updated 2022-01-31 · CVE-2021-41929

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sourcecodester The Electric Billing Management System version 1.0

Description The issue allows attackers to execute arbitrary code via the about page. This is a Cross Site Scripting (XSS) issue, which means attackers can inject malicious scripts into the website, potentially leading to unauthorized actions.

Recommendations For Sourcecodester The Electric Billing Management System version 1.0, consider restricting access to the about page until a patch is available. As a temporary workaround, avoid using the about page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-41929

Affected Products

Sourcecodester Electric Billing Management System

References · 5

• 🔥 https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-19-302021 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-41929 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41929 · Vendor Advisory
• https://t.me/cibsecurity/36140 · Telegram Post
• https://t.me/cvenotify/26057 · Telegram Post