PT-2023-25532 · Sourcecodester · Sourcecodester Student Study Center Desk Management System

·

CVE-2023-36317

·

Published

2023-08-23

·

Updated

2024-09-07

CVSS v3.1

4.8

Medium

VectorAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions sourcecodester Student Study Center Desk Management System version 1.0
Description The issue allows attackers to run arbitrary code via a crafted GET request to the web application URL. This is a Cross Site Scripting (XSS) vulnerability, which means an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or take control of the user's session.
Recommendations For sourcecodester Student Study Center Desk Management System version 1.0, consider implementing input validation and sanitization for all GET requests to prevent malicious code injection. As a temporary workaround, restrict access to sensitive areas of the web application until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-36317

Affected Products

Sourcecodester Student Study Center Desk Management System