CVE-2023-2691

MOYENNE 5.4CVE-2023-2691 · Published 14/05/2023 · updated 17/06/2026

En bref

CVE-2023-2691 est une vulnérabilité MOYENNE (CVSS 5.4) touchant personnel property equipment system (personnel property equipment system project).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.64%, plus élevée que 50.7% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
personnel property equipment system personnel_property_equipment_system_project	`= 1.0`	No fix yet

Description

A vulnerability, which was classified as problematic, was found in SourceCodester Personnel Property Equipment System 1.0. Affected is an unknown function of the file admin/add_item.php of the component POST Parameter Handler. The manipulation of the argument item_name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228972.

References

LeozhangCA/CVEReport · Exploit
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Autres vulnérabilités de personnel property equipment system

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free