PT-2023-25747 · Unknown · Phpgurukul Online Fire Reporting System

Published 2023-07-27 · Updated 2023-12-21 · CVE-2023-36941

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Fire Reporting System Using PHP and MySQL version 1.2

Description A cross-site scripting (XSS) issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields.

Recommendations For PHPGurukul Online Fire Reporting System Using PHP and MySQL version 1.2, consider validating and sanitizing user input for the team name, leader, and member fields to prevent the injection of malicious payloads. As a temporary workaround, restrict access to these fields until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-36941

Affected Products

Phpgurukul Online Fire Reporting System

References · 6

• 🔥 https://medium.com/%40ridheshgohil1092/cve-2023-36941-xss-on-online-fire-reporting-system-v-1-2-df84d7ac3fd1 · Exploit
• 🔥 https://medium.com/@ridheshgohil1092/cve-2023-36941-xss-on-online-fire-reporting-system-v-1-2-df84d7ac3fd1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-36941 · Security Note
• https://osv.dev/vulnerability/CVE-2023-36941 · Vendor Advisory
• https://packetstormsecurity.com · Note
• https://t.me/cibsecurity/67349 · Telegram Post