CVE-2023-0563: PHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross site scripting

Published Jan 28, 2023

Updated

A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219717 was assigned to this vulnerability.

Affected Software

2 affected components

Bank Locker Management System Project Bank Locker Management System=1.0

Phpgurukul Bank Locker Management System=1.0

Event History

Jan 28, 2023

CVE Published

via MITRE·10:24 PM

Data Sourced

via MITRE·10:24 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-0563?

The severity of CVE-2023-0563 is medium with a CVSS score of 4.8.

How does CVE-2023-0563 affect the PHPGurukul Bank Locker Management System?

CVE-2023-0563 affects the PHPGurukul Bank Locker Management System version 1.0.

What is the CWE classification for CVE-2023-0563?

CVE-2023-0563 is classified as CWE-79 (Cross-Site Scripting).

Is there a fix available for CVE-2023-0563?

There is currently no known fix available for CVE-2023-0563. It is recommended to follow best security practices and implement appropriate mitigations.

Where can I find more information about CVE-2023-0563?

More information about CVE-2023-0563 can be found at the following references: [1](https://vuldb.com/?id.219717) [2](https://vuldb.com/?ctiid.219717) [3](https://github.com/ctflearner/Vulnerability/blob/main/Bank_Locker_Management_System/BLMS_XSS_IN_ADMIN_BROWSER.md)