PT-2023-32678 · Unknown · Phpgurukul Nipah Virus Testing Management System
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
PHPGurukul Nipah Virus Testing Management System version 1.0
Description
A vulnerability was found in the PHPGurukul Nipah Virus Testing Management System, affecting an unknown part of the file
registered-user-testing.php. The manipulation of the regmobilenumber argument leads to cross-site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.Recommendations
For PHPGurukul Nipah Virus Testing Management System version 1.0, as a temporary workaround, consider restricting the use of the
regmobilenumber argument in the affected file until a patch is available. Additionally, restrict access to the registered-user-testing.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Phpgurukul Nipah Virus Testing Management System