A vulnerability was found in SourceCodester Simple Image Stack Website 1.0. It has been rated as problematic. This issue affects some unknown processing. The manipulation of the argument search with the input sy2ap%22%3e%3cscript%3ealert(1)%3c%2fscript%3etkxh1 leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248255.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.248255 | Third Party Advisory |
| https://vuldb.com/?id.248255 | Third Party Advisory |
| https://www.yuque.com/u39434519/pfhiwd/vry762ncuczem3yi?singleDoc# | Exploit Third Party Advisory |
Configurations
History
20 Dec 2023, 04:09
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| CPE | cpe:2.3:a:oretnom23:simple_image_stack_website:1.0:*:*:*:*:*:*:* | |
| References | () https://vuldb.com/?id.248255 - Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.248255 - Third Party Advisory | |
| References | () https://www.yuque.com/u39434519/pfhiwd/vry762ncuczem3yi?singleDoc# - Exploit, Third Party Advisory |
17 Dec 2023, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-17 10:15
Updated : 2024-05-17 02:33
NVD link : CVE-2023-6896
Mitre link : CVE-2023-6896
CVE.ORG link : CVE-2023-6896
JSON object : View
Products Affected
oretnom23
- simple_image_stack_website
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')