CVE-2023-23010

MÉDIO 6.1CVE-2023-23010 · Published 20/01/2023 · updated 17/06/2026

Em resumo

CVE-2023-23010 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta ecommerce-codeigniter-bootstrap (ecommerce-codeigniter-bootstrap project).
Chance de exploração nos próximos 30 dias (EPSS): 0.63%, maior que 50.4% das vulnerabilidades.
Correção: atualize para 2022-12-27 ou posterior.

Package	Affected versions	Patched versions
ecommerce-codeigniter-bootstrap ecommerce-codeigniter-bootstrap_project	`< 2022-12-27`	`2022-12-27`

Description

Cross Site Scripting (XSS) vulnerability in Ecommerce-CodeIgniter-Bootstrap thru commit d5904379ca55014c5df34c67deda982c73dc7fe5 (on Dec 27, 2022), allows attackers to execute arbitrary code via the languages and trans_load parameters in file add_product.php.

References

gist.github.com/enferas/8a836008e9f635a2f80d09c9a8b5a533 · Exploit
kirilkirkov/Ecommerce-CodeIgniter-Bootstrap commit d590437 · Patch
kirilkirkov/Ecommerce-CodeIgniter-Bootstrap · Exploit

Mais vulnerabilidades de ecommerce-codeigniter-bootstrap

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ecommerce-codeigniter-bootstrap

ecommerce-codeigniter-bootstrap_project

< 2022-12-27

2022-12-27

Mais vulnerabilidades de ecommerce-codeigniter-bootstrap

Ver tudo →