Remote Code Execution Vulnerability in Best Courier Management System by Sajal Jat
CVE-2023-46980

9.8CRITICAL

Key Information:

Vendor

Mayurik

Status
Best Courier Management System
Vendor
CVE Published:
3 November 2023

Badges

👾 Exploit Exists

What is CVE-2023-46980?

The Best Courier Management System version 1.0 contains a vulnerability that grants remote attackers the ability to execute arbitrary code. The flaw is exploited through a crafted script targeted at the userID parameter, enabling attackers to escalate their privileges within the system. This poses serious risks to the integrity and confidentiality of the affected systems.

References

https://youtu.be/3Mz2lSElg7Y
https://github.com/sajaljat/CVE-2023-46980/tree/main

EPSS Score

7% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability Reserved

.