CVE-2023-5021: SourceCodester AC Repair and Services System cross site scripting
First published: Sun Sep 17 2023(Updated: )
A vulnerability, which was classified as problematic, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file admin/?page=system_info/contact_information. The manipulation of the argument telephone/mobile/address leads to cross site scripting. It is possible to launch the attack remotely. VDB-239862 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Ac Repair And Services System | =1.0 | |
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2023-5021.
What is the severity of CVE-2023-5021?
The severity of CVE-2023-5021 is medium with a CVSS score of 6.1.
How does the vulnerability in SourceCodester AC Repair and Services System 1.0 occur?
The vulnerability in SourceCodester AC Repair and Services System 1.0 occurs due to a cross-site scripting (XSS) vulnerability in the 'admin/?page=system_info/contact_information' function.
What is the CWE category of CVE-2023-5021?
The CWE category of CVE-2023-5021 is CWE-79 (Cross-Site Scripting).
How can I fix the vulnerability in SourceCodester AC Repair and Services System 1.0?
To fix the vulnerability in SourceCodester AC Repair and Services System 1.0, you should ensure proper input validation and output encoding to prevent cross-site scripting attacks.
- collector/nvd-index
- agent/references
- agent/author
- agent/type
- agent/weakness
- agent/description
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/title
- agent/first-publish-date
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/oretnom23
- canonical/oretnom23 ac repair and services system
- version/oretnom23 ac repair and services system/1.0