Lucene search

VulDBCVELIST:CVE-2023-3789

HistoryJul 20, 2023 - 4:00 p.m.

CVE-2023-3789 PaulPrinting CMS Search delivery cross site scripting

2023-07-2016:00:05

CWE-79

VulDB

www.cve.org

vulnerability

paulprinting cms 2018

remote attack

cross-site scripting

/account/delivery

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

40.9%

JSON

A vulnerability, which was classified as problematic, was found in PaulPrinting CMS 2018. Affected is an unknown function of the file /account/delivery of the component Search. The manipulation of the argument s leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235056.

CNA Affected

[
  {
    "vendor": "PaulPrinting",
    "product": "CMS",
    "versions": [
      {
        "version": "2018",
        "status": "affected"
      }
    ],
    "modules": [
      "Search"
    ]
  }
]

References

seclists.org/fulldisclosure/2023/Jul/36

vuldb.com/?ctiid.235056

vuldb.com/?id.235056

www.vulnerability-lab.com/get_content.php?id=2286

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

40.9%

JSON

Related for CVELIST:CVE-2023-3789