CVE-2023-36163

MEDIO 6.1CVE-2023-36163 · Published 11/07/2023 · updated 17/06/2026

In breve

CVE-2023-36163 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda buildagate (buildagate project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.1%, superiore al 90.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
buildagate buildagate_project	`= 5`	No fix yet

Description

Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL.

References

packetstormsecurity.com/files/173366/BuildaGate5-Cross-Site-Scripting.html · Exploit
levi-coins.co.il/BuildaGate5/general2/company_search_tree.php · Not Applicable
misdar-jabo.org/BuildaGate5/general2/company_search_tree.php · Broken Link
afula.libraries.co.il/BuildaGate5library/general2/company_search_tree.php · Broken Link
github.com/TraiLeR2 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free