CVE-2023-6616: SourceCodester Simple Student Attendance System index.php cross site scripting

Published Dec 8, 2023

Updated

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247253 was assigned to this vulnerability.

Affected Software

1 affected component

oretnom23 Simple Student Attendance System=1.0

Event History

Dec 8, 2023

CVE Published

04:31 PM

Data Sourced

04:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-6616?

CVE-2023-6616 is classified as a problematic vulnerability affecting the SourceCodester Simple Student Attendance System.

What type of vulnerability is CVE-2023-6616?

CVE-2023-6616 is a cross-site scripting (XSS) vulnerability found in the file index.php.

How do I fix CVE-2023-6616?

To fix CVE-2023-6616, sanitize and validate all user inputs, especially the 'page' argument in index.php to prevent cross-site scripting attacks.

Can CVE-2023-6616 be exploited remotely?

Yes, CVE-2023-6616 can be exploited remotely, allowing attackers to manipulate the 'page' argument.

What software is affected by CVE-2023-6616?

CVE-2023-6616 affects the SourceCodester Simple Student Attendance System version 1.0.