CVE-2023-6301: SourceCodester Best Courier Management System GET Parameter parcel_list.php cross site scripting
First published: Sun Nov 26 2023(Updated: )
A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file parcel_list.php of the component GET Parameter Handler. The manipulation of the argument id with the input </TiTlE><ScRiPt>alert(1)</ScRiPt> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-246127.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-6301?
The severity of CVE-2023-6301 is medium with a CVSS score of 6.1.
How does CVE-2023-6301 affect SourceCodester Best Courier Management System?
CVE-2023-6301 affects SourceCodester Best Courier Management System 1.0.
What is the vulnerability class of CVE-2023-6301?
CVE-2023-6301 is classified as a cross-site scripting (XSS) vulnerability.
How can the vulnerability in CVE-2023-6301 be exploited?
The vulnerability in CVE-2023-6301 can be exploited by manipulating the 'id' parameter in the 'parcel_list.php' file.
Is there a fix available for CVE-2023-6301?
Please refer to the official vendor for a fix or mitigation for CVE-2023-6301.
- agent/type
- agent/first-publish-date
- agent/references
- agent/weakness
- agent/severity
- agent/title
- agent/author
- agent/description
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/mayurik
- canonical/mayurik best courier management system
- version/mayurik best courier management system/1.0