CVE-2023-6301: SourceCodester Best Courier Management System GET Parameter parcel_list.php cross site scripting
A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file parcellist.php of the component GET Parameter Handler. The manipulation of the argument id with the input </TiTlE><ScRiPt>alert(1)</ScRiPt> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-246127.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6301?
The severity of CVE-2023-6301 is medium with a CVSS score of 6.1.
How does CVE-2023-6301 affect SourceCodester Best Courier Management System?
CVE-2023-6301 affects SourceCodester Best Courier Management System 1.0.
What is the vulnerability class of CVE-2023-6301?
CVE-2023-6301 is classified as a cross-site scripting (XSS) vulnerability.
How can the vulnerability in CVE-2023-6301 be exploited?
The vulnerability in CVE-2023-6301 can be exploited by manipulating the 'id' parameter in the 'parcel_list.php' file.
Is there a fix available for CVE-2023-6301?
Please refer to the official vendor for a fix or mitigation for CVE-2023-6301.