CVE-2023-2425: SourceCodester Simple Student Information System Add New Course cross site scripting

Published Apr 29, 2023

Updated

A vulnerability was found in SourceCodester Simple Student Information System 1.0. It has been classified as problematic. This affects an unknown part of the file /classes/Master.php?f=savecourse of the component Add New Course. The manipulation of the argument name with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227751.

Affected Software

1 affected component

Simple Student Information System Project Simple Student Information System=1.0

Event History

Apr 29, 2023

CVE Published

07:31 AM

Data Sourced

07:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-2425?

The severity of CVE-2023-2425 is medium.

What component of SourceCodester Simple Student Information System is affected by CVE-2023-2425?

The Add New Course component of SourceCodester Simple Student Information System is affected by CVE-2023-2425.

How can CVE-2023-2425 be exploited?

CVE-2023-2425 can be exploited through a cross-site scripting (XSS) attack.

What is the Common Weakness Enumeration (CWE) ID for CVE-2023-2425?

The Common Weakness Enumeration (CWE) ID for CVE-2023-2425 is 79.

Are there any references for CVE-2023-2425?

Yes, you can find references for CVE-2023-2425 at the following links: [Link 1](https://github.com/sssddc11/bug_report/blob/master/XSS-1.md), [Link 2](https://vuldb.com/?ctiid.227751), [Link 3](https://vuldb.com/?id.227751).