First published: Thu Jul 13 2023(Updated: )
A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file admin/?page=user/manage_user. The manipulation of the argument firstname/middlename leads to cross site scripting. The attack can be launched remotely. The identifier VDB-234013 was assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oretnom23 Ac Repair And Services System | =1.0 | |
=1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2023-3659 is medium.
The affected software version of CVE-2023-3659 is 1.0.
The CVE-2023-3659 vulnerability can be exploited through cross-site scripting by manipulating the argument 'firstname' or 'middlename' in the 'admin/?page=user/manage_user' file.
The Common Weakness Enumeration (CWE) ID of CVE-2023-3659 is CWE-79.
To fix CVE-2023-3659, it is recommended to apply the latest patches or updates provided by the vendor, and ensure input validation and output encoding are implemented to prevent cross-site scripting vulnerabilities.