Design/Logic Flaw

2023-11-0316:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

remote execution

arbitrary code

privilege escalation

crafted script

nvd

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.9%

JSON

An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter.

CPENameOperatorVersion
best_courier_management_systemeq1.0

CPE	Name	Operator	Version
	best_courier_management_system	eq	1.0

References

github.com/sajaljat/CVE-2023-46980/tree/main

youtu.be/3Mz2lSElg7Y