PT-2023-26145 · Unknown · Paulprinting Cms

Paul · Published 2023-07-20 · Updated 2024-05-17 · CVE-2023-3785

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PaulPrinting CMS version 2018

Description A vulnerability was found in the software, allowing for cross-site scripting through the manipulation of the firstname, lastname, address, city, and state arguments. The attack can be launched remotely.

Recommendations For PaulPrinting CMS version 2018, consider disabling the functionality that handles the firstname, lastname, address, city, and state arguments until a patch is available. Restrict access to the affected functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-3785

Affected Products

Paulprinting Cms

References · 8

• 🔥 https://vulnerability-lab.com/get_content.php?id=2285 · Exploit
• 🔥 https://seclists.org/fulldisclosure/2023/Jul/39 · Exploit
• https://osv.dev/vulnerability/CVE-2023-3785 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3785 · Security Note
• https://t.me/cvenotify/54719 · Telegram Post
• https://vuldb.com/?id.235052 · Note
• https://vuldb.com/?ctiid.235052 · Note
• https://t.me/cibsecurity/67034 · Telegram Post