vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file search-request.php. The manipulation of the argument searchdata with the input "><script>alert(document.domain)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219596.
| Link | Resource |
|---|---|
| https://github.com/ctflearner/Vulnerability/blob/main/Online-Security-guard-POC.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.219596 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?id.219596 | Third Party Advisory VDB Entry |
| https://github.com/ctflearner/Vulnerability/blob/main/Online-Security-guard-POC.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.219596 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?id.219596 | Third Party Advisory VDB Entry |
Configuration 1 (hide)
|
21 Nov 2024, 07:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/ctflearner/Vulnerability/blob/main/Online-Security-guard-POC.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.219596 - Permissions Required, Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?id.219596 - Third Party Advisory, VDB Entry | |
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 3.5 |
Published : 2023-01-27 11:15
Updated : 2024-11-21 07:37
NVD link : CVE-2023-0527
Mitre link : CVE-2023-0527
CVE.ORG link : CVE-2023-0527
JSON object : View
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')