Lucene search

VulDBCVE-2022-2748

HistoryAug 11, 2022 - 5:15 a.m.

CVE-2022-2748

2022-08-1105:15:08

CWE-79

VulDB

web.nvd.nist.gov

sourcecodester

online book store system

vulnerability

cross site scripting

remote attack

nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

32.8%

JSON

A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-206016.

Affected configurations

Nvd

Node

simple_online_book_store_system_projectsimple_online_book_store_systemMatch-

VendorProductVersionCPE
simple_online_book_store_system_projectsimple_online_book_store_system-cpe:2.3:a:simple_online_book_store_system_project:simple_online_book_store_system:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
simple_online_book_store_system_project	simple_online_book_store_system	-	cpe:2.3:a:simple_online_book_store_system_project:simple_online_book_store_system:-:::::::*

CNA Affected

[
  {
    "product": "Simple Online Book Store System",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

vuldb.com/?id.206016

Social References

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

32.8%

JSON

Related for CVE-2022-2748