PT-2023-27988 · Unknown · Dairy Farm Shop Management System Using Php/Mysql

Shivam Sharma · Published 2023-09-11 · Updated 2023-09-15 · CVE-2023-41593

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Dairy Farm Shop Management System Using PHP and MySQL version 1.1

Description The issue allows attackers to execute arbitrary web scripts and HTML via a crafted payload injected into the Category and Category Field parameters. This enables the execution of malicious scripts, potentially leading to unauthorized access or data manipulation.

Recommendations For Dairy Farm Shop Management System Using PHP and MySQL version 1.1, consider disabling the Category and Category Field parameters until a patch is available to prevent the injection of crafted payloads. Restrict access to these parameters to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-41593

Affected Products

Dairy Farm Shop Management System Using Php/Mysql

References · 9

• 🔥 https://github.com/MATRIXDEVIL/CVE/blob/main/CVE-2023-41593 · Exploit
• https://osv.dev/vulnerability/CVE-2023-41593 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41593 · Security Note
• https://twitter.com/VulmonFeeds/status/1701338086041403473 · Twitter Post
• https://twitter.com/CVEnew/status/1701289313118388374 · Twitter Post
• https://portswigger.net/web-security/cross-site-scripting · Note
• https://owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prevention_Cheat_Sheet · Note
• https://t.me/cibsecurity/70217 · Telegram Post
• https://acunetix.com/websitesecurity/cross-site-scripting · Note