PT-2023-30980 · Unknown · Car Rental Script
CVE-2023-48837
·
Publicado
2023-12-07
·
Atualizado
2023-12-09
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Car Rental Script version 3.0
Description
The issue concerns Multiple HTML Injection problems. These issues can be exploited via the
SMS API Key or Default Country Code.Recommendations
For Car Rental Script version 3.0, update the software to a version that fixes the Multiple HTML Injection issues, specifically ensuring the
SMS API Key and Default Country Code are properly sanitized to prevent HTML injection. As a temporary workaround, consider restricting access to the SMS API Key and Default Country Code to minimize the risk of exploitation.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Car Rental Script