Beveiligingsadvies

CVE-2023-1359

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-03-12 08:00:04
Laatst bijgewerkt 2025-02-27 19:17:06
Toegewezen door VulDB
CVSS-score 3.3
Status PUBLISHED

Beschrijving

A vulnerability has been found in SourceCodester Gadget Works Online Ordering System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /philosophy/admin/user/controller.php?action=add of the component Add New User. The manipulation of the argument U_NAME leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222862 is the identifier assigned to this vulnerability.