CVE-2023-2349: SourceCodester Service Provider Management System index.php cross site scripting
First published: Thu Apr 27 2023(Updated: )
A vulnerability classified as problematic has been found in SourceCodester Service Provider Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227592.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Service Provider Management System | =1.0 | |
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the CVE-ID for this vulnerability?
The CVE-ID for this vulnerability is CVE-2023-2349.
What is the severity rating of CVE-2023-2349?
CVE-2023-2349 has a severity rating of medium.
What is the affected software and version of CVE-2023-2349?
The affected software is Oretnom23 Service Provider Management System version 1.0.
What is the CWE-ID for CVE-2023-2349?
The CWE-ID for CVE-2023-2349 is CWE-79.
Is CVE-2023-2349 remotely exploitable?
Yes, CVE-2023-2349 can be exploited remotely.
- collector/nvd-index
- agent/author
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/references
- agent/severity
- agent/title
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/oretnom23
- canonical/oretnom23 service provider management system
- version/oretnom23 service provider management system/1.0