SourceCodester AC Repair and Services System cross site scripting
CVE-2023-5021

6.1MEDIUM

Key Information:

Vendor
SourceCodester
Status
AC Repair and Services System
Vendor
CVE Published:
17 September 2023

Summary

A vulnerability, which was classified as problematic, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file admin/?page=system_info/contact_information. The manipulation of the argument telephone/mobile/address leads to cross site scripting. It is possible to launch the attack remotely. VDB-239862 is the identifier assigned to this vulnerability.

Affected Version(s)

AC Repair and Services System 1.0

References

https://vuldb.com/?id.239862
vdb-entrytechnical-description
https://vuldb.com/?ctiid.239862
signature

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

dokaterroista (VulDB User)
.