A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ecommerce/admin/category/controller.php of the component Category Name Handler. The manipulation of the argument CATEGORY leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223411.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.223411 | Third Party Advisory |
| https://vuldb.com/?id.223411 | Third Party Advisory |
Configurations
History
23 Mar 2023, 13:52
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| CPE | cpe:2.3:a:e-commerce_system_project:e-commerce_system:1.0:*:*:*:*:*:*:* | |
| References | (MISC) https://vuldb.com/?id.223411 - Third Party Advisory | |
| References | (MISC) https://vuldb.com/?ctiid.223411 - Third Party Advisory |
20 Mar 2023, 14:02
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-20 10:15
Updated : 2024-05-17 02:18
NVD link : CVE-2023-1507
Mitre link : CVE-2023-1507
CVE.ORG link : CVE-2023-1507
JSON object : View
Products Affected
e-commerce_system_project
- e-commerce_system
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')