CVE-2023-3853: phpscriptpoint BloodBank page.php cross site scripting

Published Jul 23, 2023
·
Updated

A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235205 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component
phpscriptpoint BloodBank=1.1

Event History

Jul 23, 2023
CVE Published
via MITRE·10:31 PM
Data Sourced
via MITRE·10:31 PM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-3853?

CVE-2023-3853 has been rated as problematic, indicating a significant security concern.

2

How does CVE-2023-3853 affect BloodBank 1.1?

CVE-2023-3853 affects the processing of the file page.php, leading to cross-site scripting vulnerabilities.

3

What type of attack can be executed using CVE-2023-3853?

The attack associated with CVE-2023-3853 can be initiated remotely, allowing unauthorized access.

4

How do I fix CVE-2023-3853 in BloodBank 1.1?

To fix CVE-2023-3853, ensure that user inputs are properly sanitized and validated in the processing of page.php.

5

What is the potential impact of CVE-2023-3853 on users?

The potential impact of CVE-2023-3853 includes unauthorized manipulation of content leading to potential phishing attacks.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203