PT-2023-32668 · Sourcecodester · Sourcecodester Book Borrower System
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
SourceCodester Book Borrower System version 1.0
Description
A vulnerability was found in the system, classified as problematic, affecting some unknown processing of the file "add-book.php". The manipulation of the argument
Book Title or Book Author leads to cross-site scripting. The attack may be initiated remotely.Recommendations
For version 1.0, consider disabling the "add-book.php" endpoint until a patch is available to prevent cross-site scripting attacks. Restrict access to the
Book Title and Book Author arguments in the "add-book.php" endpoint to minimize the risk of exploitation.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Sourcecodester Book Borrower System