A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247253 was assigned to this vulnerability.
References
Link | Resource |
---|---|
https://vuldb.com/?ctiid.247253 | Permissions Required Third Party Advisory |
https://vuldb.com/?id.247253 | Third Party Advisory |
https://www.yuque.com/u39339523/el4dxs/sxa6f9gywg6vfbur | Exploit Third Party Advisory |
Configurations
History
12 Dec 2023, 20:06
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
CPE | cpe:2.3:a:oretnom23:simple_student_attendance_system:1.0:*:*:*:*:*:*:* | |
References | () https://www.yuque.com/u39339523/el4dxs/sxa6f9gywg6vfbur - Exploit, Third Party Advisory | |
References | () https://vuldb.com/?id.247253 - Third Party Advisory | |
References | () https://vuldb.com/?ctiid.247253 - Permissions Required, Third Party Advisory |
08 Dec 2023, 17:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-12-08 17:15
Updated : 2024-05-17 02:33
NVD link : CVE-2023-6616
Mitre link : CVE-2023-6616
CVE.ORG link : CVE-2023-6616
JSON object : View
Products Affected
oretnom23
- simple_student_attendance_system
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')