CVE-2020-5308

6.1MEDIUM

Key Information:

Vendor
PHPgurukul
Status
Dairy Farm Shop Management System
Vendor
CVE Published:
9 January 2020

Summary

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php.

References

https://phpgurukul.com/dairy-farm-shop-management-system-...
x_refsource_MISC
http://packetstormsecurity.com/files/155861/Dairy-Farm-Sh...
x_refsource_MISC
https://cinzinga.github.io/CVE-2020-5307-5308/
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.