SourceCodester Canteen Management System customer.php builtin_echo cross site scripting
CVE-2022-4253

3.5LOW

Key Information:

Vendor
Sourcecodester
Status
Canteen Management System
Vendor
CVE Published:
1 December 2022

Summary

A vulnerability was found in SourceCodester Canteen Management System. It has been declared as problematic. This vulnerability affects the function builtin_echo of the file customer.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-214630 is the identifier assigned to this vulnerability.

Affected Version(s)

Canteen Management System

References

https://blog.csdn.net/weixin_43864034/article/details/128...
https://vuldb.com/?id.214630

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.