A vulnerability classified as problematic was found in PHPCrazy 1.1.1. This vulnerability affects unknown code of the file admin/admin.php?action=users&mode=info&user=2. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221086 is the identifier assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/whiex/asdaszdfadsaf/blob/main/PHPCrazyCMS%20storage%20CSRF.docx | Broken Link |
| https://vuldb.com/?ctiid.221086 | Third Party Advisory |
| https://vuldb.com/?id.221086 | Third Party Advisory |
| https://github.com/whiex/asdaszdfadsaf/blob/main/PHPCrazyCMS%20storage%20CSRF.docx | Broken Link |
| https://vuldb.com/?ctiid.221086 | Third Party Advisory |
| https://vuldb.com/?id.221086 | Third Party Advisory |
Configurations
History
21 Nov 2024, 07:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/whiex/asdaszdfadsaf/blob/main/PHPCrazyCMS%20storage%20CSRF.docx - Broken Link | |
| References | () https://vuldb.com/?ctiid.221086 - Third Party Advisory | |
| References | () https://vuldb.com/?id.221086 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 3.5 |
23 Feb 2023, 04:53
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-02-15 14:15
Updated : 2024-11-21 07:37
NVD link : CVE-2023-0840
Mitre link : CVE-2023-0840
CVE.ORG link : CVE-2023-0840
JSON object : View
Products Affected
phpcrazy_project
- phpcrazy
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')