Lucene search

[email protected]CVE-2022-40088

HistorySep 22, 2022 - 10:15 p.m.

CVE-2022-40088

2022-09-2222:15:09

CWE-79

[email protected]

web.nvd.nist.gov

cve-2022-40088

simple college website

xss

vulnerability

web security

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

41.4%

JSON

Simple College Website v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /college_website/index.php?page=. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.

Affected configurations

NVD

Node

simple_college_website_projectsimple_college_websiteMatch1.0

CPENameOperatorVersion
simple_college_website_project:simple_college_websitesimple college website project simple college websiteeq1.0

CPE	Name	Operator	Version
simple_college_website_project:simple_college_website	simple college website project simple college website	eq	1.0

References

gowthamaraj-rajendran.medium.com/simple-college-website-1-0-xss-1f13228233a

www.sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.html

www.sourcecodester.com/sites/default/files/download/oretnom23/simple-college-website.zip

Social References

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

41.4%

JSON

Related for CVE-2022-40088

cvelist1 prion1 nvd1