PT-2023-18867 · Unknown · Art Gallery Management System Project

Rahul Patwari · Published 2023-02-10 · Updated 2023-12-20 · CVE-2023-23161

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Art Gallery Management System Project version 1.0

Description A reflected cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under the ART TYPE option in the navigation bar.

Recommendations For Art Gallery Management System Project version 1.0, avoid using the artname parameter in the affected navigation bar option until the issue is resolved. Consider temporarily restricting access to the ART TYPE option to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-23161

Affected Products

Art Gallery Management System Project

References · 7

• 🔥 https://github.com/rahulpatwari/CVE/blob/main/CVE-2023-23161/CVE-2023-23161.txt · Exploit
• 🔥 https://exploit-db.com/exploits/51214 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-23161 · Security Note
• https://osv.dev/vulnerability/CVE-2023-23161 · Vendor Advisory
• https://phpgurukul.com/art-gallery-management-system-using-php-and-mysql · Note
• https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip · Note
• http://packetstormsecurity.com/files/171642/Art-Gallery-Management-System-Project-1.0-Cross-Site-Scripting.html · Note