CVEvulnerability
CVE-2023-6616
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-12-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.5 LOW — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247253 was assigned to this vulnerability.
Affected configurations
• oretnom23 simple student attendance system 1.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://vuldb.com/?ctiid.247253 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.247253 Third Party Advisory
- https://www.yuque.com/u39339523/el4dxs/sxa6f9gywg6vfbur Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.247253 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.247253 Third Party Advisory
- https://www.yuque.com/u39339523/el4dxs/sxa6f9gywg6vfbur Exploit, Third Party Advisory