CVE-2023-1686: SourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scripting

Published Mar 29, 2023

Updated

A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file bsenordering/admin/category/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input <script>alert(233)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224243.

Affected Software

1 affected component

Young Entrepreneur E-negosyo System Project Young Entrepreneur E-negosyo System=1.0

Event History

Mar 29, 2023

CVE Published

07:00 AM

Data Sourced

07:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-1686?

CVE-2023-1686 has been rated as problematic.

Which component is affected by CVE-2023-1686?

CVE-2023-1686 affects the GET Parameter Handler in bsenordering/admin/category/index.php.

What version of Young Entrepreneur E-Negosyo System is impacted by CVE-2023-1686?

CVE-2023-1686 affects Young Entrepreneur E-Negosyo System version 1.0.

How can I mitigate CVE-2023-1686?

Mitigation strategies typically include updating to a patched version of the software or implementing input validation and sanitization.

What type of attack does CVE-2023-1686 expose the application to?

CVE-2023-1686 may expose the application to Cross-Site Scripting (XSS) attacks.