Lucene search

K
cvelistFluid AttacksCVELIST:CVE-2023-45203
HistoryNov 01, 2023 - 10:11 p.m.

CVE-2023-45203 Online Examination System v1.0 - Multiple Open Redirects

2023-11-0122:11:49
CWE-601
Fluid Attacks
www.cve.org
cve-2023-45203
open redirect
login.php
web site

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

17.0%

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The ‘q’ parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Online Examination System",
    "vendor": "Projectworlds Pvt. Limited",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ]
  }
]

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

17.0%

Related for CVELIST:CVE-2023-45203