A vulnerability was found in SourceCodester Task Reminder System 1.0 and classified as problematic. This issue affects some unknown processing of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226985 was assigned to this vulnerability.
References
Link | Resource |
---|---|
https://github.com/E1CHO/cve_hub/blob/main/Task%20Reminder%20System/Task%20Reminder%20System%20-%20vuln%204.pdf | Third Party Advisory |
https://vuldb.com/?ctiid.226985 | Third Party Advisory VDB Entry |
https://vuldb.com/?id.226985 | Permissions Required Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
02 May 2023, 18:01
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
CPE | cpe:2.3:a:task_reminder_system_project:task_reminder_system:1.0:*:*:*:*:*:*:* | |
References | (MISC) https://vuldb.com/?id.226985 - Permissions Required, Third Party Advisory, VDB Entry | |
References | (MISC) https://vuldb.com/?ctiid.226985 - Third Party Advisory, VDB Entry | |
References | (MISC) https://github.com/E1CHO/cve_hub/blob/main/Task%20Reminder%20System/Task%20Reminder%20System%20-%20vuln%204.pdf - Third Party Advisory |
21 Apr 2023, 11:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-04-21 11:15
Updated : 2024-05-17 02:22
NVD link : CVE-2023-2219
Mitre link : CVE-2023-2219
CVE.ORG link : CVE-2023-2219
JSON object : View
Products Affected
task_reminder_system_project
- task_reminder_system
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')