Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2023-0563 — Cross-site Scripting in Bank Locker Management System

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
4.8MEDIUMNVD
CNA3.5
EPSS
32.7%
top 3.12%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Phpgurukul Bank Locker Management System
Timeline
PublishedJan 28
Latest updateJan 29

Description

A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219717 was assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NExploitability: 1.7 | Impact: 2.7

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-cjw3-mpxq-cggf: A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1↗2023-01-29
▶
CVEList
PHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross site scripting↗2023-01-28
▶

💥Exploits & PoCs

1
Nuclei
Bank Locker Management System - Cross-Site Scripting
▶
CVE-2023-0563 — Cross-site Scripting | cvebase