CVE-2022-2682
Assigner: VulDB
Published: 2022-08-05T20:21:55
State: PUBLISHED
affected: product: Alphaware Simple E-Commerce System
vendor: SourceCodester
versions: status: affected
version: n/a
descriptions: value: A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System. Affected by this issue is some unknown functionality of the file stockin.php. The manipulation of the argument id with the input '"><script>alert(/xss/)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-205670 is the identifier assigned to this vulnerability.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross Site Scripting
type: CWE
title: SourceCodester Alphaware Simple E-Commerce System stockin.php cross site scripting
x_generator: vuldb.com