CVE-2023-0563
low · 3.5A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219717 was assigned to this vulnerability.
3.5
CVSS
37.6%
EPSS (exploit prob.)
98th
EPSS percentile
2023-01-28
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-79
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| phpgurukul | bank_locker_management_system | 1.0 |
Check a specific version with /api/v1/cve/match.
References
- https://github.com/ctflearner/Vulnerability/blob/main/Bank_Locker_Management_System/BLMS_XSS_IN_ADMIN_BROWSER.md
- https://vuldb.com/?ctiid.219717
- https://vuldb.com/?id.219717
- https://github.com/ctflearner/Vulnerability/blob/main/Bank_Locker_Management_System/BLMS_XSS_IN_ADMIN_BROWSER.md
- https://vuldb.com/?ctiid.219717
- https://vuldb.com/?id.219717
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-0563