PT-2023-16922 · Sourcecodester · Sourcecodester Covid-19 Directory On Vaccination System

·

CVE-2023-1354

·

Publicado

2023-03-11

·

Atualizado

2024-05-17

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System version 1.0
Description A vulnerability has been found in the system, classified as problematic, affecting an unknown functionality of the file register.php. The manipulation of the arguments txtfullname, txtage, txtaddress, txtphone leads to cross-site scripting. The attack can be launched remotely.
Recommendations For version 1.0, consider disabling the manipulation of the arguments txtfullname, txtage, txtaddress, txtphone in the register.php file until a patch is available. Restrict access to the register.php file to minimize the risk of exploitation. Avoid using the arguments txtfullname, txtage, txtaddress, txtphone until the issue is resolved.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-1354

Produtos afetados

Sourcecodester Covid-19 Directory On Vaccination System