PT-2023-17285 · Unknown · Sourcecodester Online Payroll System

Published 2023-04-05 · Updated 2024-05-17 · CVE-2023-1853

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Online Payroll System version 1.0

Description A problematic issue has been found in the processing of the file /admin/employee edit.php, allowing for cross site scripting through the manipulation of an argument. This issue can be exploited remotely.

Recommendations For SourceCodester Online Payroll System version 1.0, consider restricting access to the /admin/employee edit.php file until a patch is available. As a temporary workaround, avoid using the argument that leads to cross site scripting in the affected file.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-1853

Affected Products

Sourcecodester Online Payroll System

References · 6

• 🔥 https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%209.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2023-1853 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1853 · Security Note
• https://t.me/cibsecurity/61435 · Telegram Post
• https://vuldb.com/?ctiid.224993 · Note
• https://vuldb.com/?id.224993 · Note