CVEvulnerability
CVE-2023-3016
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-05-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.5 LOW — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A vulnerability was found in yiwent Vip Video Analysis 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/admincore.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-230360.
Affected configurations
• vip video analysis project vip video analysis 1.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/VIP-video-analysis/XSS.md Broken Link
- https://vuldb.com/?ctiid.230360 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.230360 Permissions Required, Third Party Advisory
- https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/VIP-video-analysis/XSS.md Broken Link
- https://vuldb.com/?ctiid.230360 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.230360 Permissions Required, Third Party Advisory