Vulnerability · Published May 12, 2023 · Assigned by VulDB
CVE-2023-2667SourceCodester Lost and Found Information System cross site scripting
Low 3.5
In plain English
A low-severity cross-site scripting in Lost and Found Information System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Official description
A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file admin/. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228883.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Lost and Found Information System | 1.0 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
References
- https://vuldb.com/?id.228883 vdb-entry, technical-description
- https://vuldb.com/?ctiid.228883 signature
- https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/CVE-2023-2667.md exploit