Description
A vulnerability was found in SourceCodester Survey Application System 1.0 and classified as problematic. This issue affects some unknown processing of the component Add New Handler. The manipulation of the argument Title with the input <script>prompt(document.domain)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225329 was assigned to this vulnerability.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| SourceCodester | Survey Application System | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-24132 | A vulnerability was found in SourceCodester Survey Application System 1.0 and classified as problematic. This issue affects some unknown processing of the component Add New Handler. The manipulation of the argument Title with the input <script>prompt(document.domain)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225329 was assigned to this vulnerability. |
References
| Link | Providers |
|---|---|
| https://vuldb.com/?ctiid.225329 |
|
| https://vuldb.com/?id.225329 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2024-08-02T06:05:27.092Z
Reserved: 2023-04-07T21:49:14.725Z
Link: CVE-2023-1946
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-04-07T23:15:08.477
Modified: 2024-11-21T07:40:12.180
Link: CVE-2023-1946
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
-
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')