CVE-2023-1359 (gadget_works_online_ordering_system) | allinfosecnews.com

March 12, 2023, 8:15 a.m. |

National Vulnerability Database web.nvd.nist.gov

A vulnerability has been found in SourceCodester Gadget Works Online Ordering System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /philosophy/admin/user/controller.php?action=add of the component Add New User. The manipulation of the argument U_NAME leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222862 is the identifier assigned to this vulnerability.

action argument attack classified code cross site scripting cve exploit file gadget manipulation may philosophy php public scripting system vulnerability

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 6 months ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 6 months ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 6 months ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 6 months ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 6 months ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 6 months ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 6 months ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 6 months ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 6 months ago | web.nvd.nist.gov

android bypass check cve +10

Enterprise Security Architect

@ Proofpoint | Utah

View on infosec-jobs.com

Senior Incident Response and Digital Forensics Engineer

@ Danske Bank | Vilnius, Lithuania

View on infosec-jobs.com

SOC Analyst (Remote)

@ Bertelsmann | New York City, US, 10019

View on infosec-jobs.com

Risk Consulting - Protect Tech - Staff - IT Compliance - ISO-NIST-FISMA-PCI DSS and Privacy

@ EY | Bengaluru, KA, IN, 560016

View on infosec-jobs.com

Security Officer Warrenpoint Harbour

@ TSS | Newry, County Down, United Kingdom

View on infosec-jobs.com

Senior DevSecOps Engineer

@ Scientific Systems Company, Inc. | Burlington, Massachusetts, United States

View on infosec-jobs.com