CVE-2022-3518
published 2022-10-15CVE-2022-3518: A vulnerability classified as problematic has been found in SourceCodester Sanitization Management System 1.0. Affected is an unknown function of the component…
PriorityP421medium4.8CVSS 3.1
AVNACLPRHUIRSCCLILAN
EPSS
0.52%
40.6th percentile
A vulnerability classified as problematic has been found in SourceCodester Sanitization Management System 1.0. Affected is an unknown function of the component User Creation Handler. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is possible to launch the attack remotely. VDB-211014 is the identifier assigned to this vulnerability.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sanitization_management_system_project | sanitization_management_system | — | — |
| sourcecodester | sanitization_management_system | — | — |
CVSS provenance
nvdv3.14.8MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
vendor_oracle8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-cvpx-jr25-3g66: A vulnerability classified as problematic has been found in SourceCodester Sanitization Management System 1
ghsa_unreviewed·2022-10-15
CVE-2022-3518 [MEDIUM] CWE-79 GHSA-cvpx-jr25-3g66: A vulnerability classified as problematic has been found in SourceCodester Sanitization Management System 1
A vulnerability classified as problematic has been found in SourceCodester Sanitization Management System 1.0. Affected is an unknown function of the component User Creation Handler. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is possible to launch the attack remotely. VDB-211014 is the identifier assigned to this vulnerability.
Oracle
Oracle Oracle Communications Risk Matrix: OC-CNE (libxml2) — CVE-2021-3518
vendor_oracle·2022-04-15·CVSS 8.8
CVE-2021-3518 [HIGH] Oracle Oracle Communications Risk Matrix: OC-CNE (libxml2) — CVE-2021-3518
Oracle Oracle Communications Risk Matrix: OC-CNE (libxml2) vulnerability
CVE: CVE-2021-3518
CVSS: 8.8
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuapr2022 (APR 2022)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-15
Published