CVE-2023-3853: phpscriptpoint BloodBank page.php cross site scripting
First published: Sun Jul 23 2023(Updated: )
A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235205 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Blood Bank Management System | =1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-3853?
CVE-2023-3853 has been rated as problematic, indicating a significant security concern.
How does CVE-2023-3853 affect BloodBank 1.1?
CVE-2023-3853 affects the processing of the file page.php, leading to cross-site scripting vulnerabilities.
What type of attack can be executed using CVE-2023-3853?
The attack associated with CVE-2023-3853 can be initiated remotely, allowing unauthorized access.
How do I fix CVE-2023-3853 in BloodBank 1.1?
To fix CVE-2023-3853, ensure that user inputs are properly sanitized and validated in the processing of page.php.
What is the potential impact of CVE-2023-3853 on users?
The potential impact of CVE-2023-3853 includes unauthorized manipulation of content leading to potential phishing attacks.
- agent/references
- agent/type
- agent/author
- agent/weakness
- agent/description
- agent/softwarecombine
- agent/severity
- agent/title
- agent/event
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-latest
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/phpscriptpoint
- canonical/blood bank management system
- version/blood bank management system/1.1