PT-2022-11629 · Php+1 · Php+1

Pecho Kobadinski · Published 2022-09-16 · Updated 2022-09-20 · CVE-2021-42597

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sourcecodester Storage Unit Rental Management System version 1.0 PHP versions 8.0.10 Apache versions 2.4.14

Description A Cross Site Scripting (XSS) issue exists via the Add New Tenant List Rent List form. This allows for potential malicious script execution.

Recommendations For Sourcecodester Storage Unit Rental Management System version 1.0, consider disabling the Add New Tenant List Rent List form until a patch is available. For PHP versions 8.0.10, update to a newer version to mitigate the risk. For Apache versions 2.4.14, update to a newer version to mitigate the risk.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-42597

Affected Products

Apache

Php

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-42597 · Security Note
• https://osv.dev/vulnerability/CVE-2021-42597 · Vendor Advisory
• https://t.me/cibsecurity/49928 · Telegram Post
• https://t.me/cvenotify/36361 · Telegram Post
• https://sourcecodester.com/php/14932/storage-unit-rental-management-system-using-php-free-source-code.html · Note
• https://cxsecurity.com/issue/WLB-2022090036 · Note