Canteen Management System CVE-2022-43144

MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2022-11-08 cve@mitre.org

XSS Canteen Management System

5.4

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

1

CVE Published

Nov 08, 2022 - 23:15 nvd

MEDIUM 5.4

DescriptionNVD

A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

AnalysisAI

A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Affected products include: Canteen Management System Project Canteen Management System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.

More in Canteen Management System

View all

CVE-2023-1475 CRITICAL Act Now POC

A vulnerability, which was classified as critical, has been found in SourceCodester Canteen Management System 1.0.php. R

CVE-2023-1461 CRITICAL Act Now POC

A vulnerability was found in SourceCodester Canteen Management System 1.0. Rated critical severity (CVSS 9.8), this vuln

CVE-2023-1459 CRITICAL Act Now POC

A vulnerability was found in SourceCodester Canteen Management System 1.0 and classified as critical. Rated critical sev

CVE-2023-23279 CRITICAL Act Now POC

Canteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php. Rated critical severity

CVE-2023-0781 CRITICAL Act Now POC

A vulnerability was found in SourceCodester Canteen Management System 1.0. Rated critical severity (CVSS 9.8), this vuln

CVE-2022-4222 CRITICAL Act Now POC

A vulnerability was found in SourceCodester Canteen Management System. Rated critical severity (CVSS 9.8), this vulnerab

CVE-2022-3583 CRITICAL Act Now POC

A vulnerability was found in SourceCodester Canteen Management System 1.0. Rated critical severity (CVSS 9.8), this vuln

CVE-2022-4403 HIGH This Week POC

A vulnerability classified as critical was found in SourceCodester Canteen Management System. Rated high severity (CVSS

CVE-2022-3584 HIGH This Week POC

A vulnerability was found in SourceCodester Canteen Management System 1.0. Rated high severity (CVSS 8.8), this vulnerab

CVE-2022-43278 HIGH This Week POC

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter at

CVE-2022-43277 HIGH This Week POC

Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/php_ac

CVE-2022-43292 HIGH This Week POC

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthapp

Same weakness CWE-79 – Cross-site Scripting (XSS)

View all

CVE-2013-7389 MEDIUM POC

CVE-2021-25299 MEDIUM POC

CVE-2014-2120 MEDIUM

CVE-2023-40000 HIGH POC

CVE-2016-8581 MEDIUM POC

CVE-2013-5223 MEDIUM POC

CVE-2025-52367 MEDIUM POC

CVE-2015-0072 MEDIUM POC

Same technique XSS

View all

CVE-2017-9248 CRITICAL POC

CVE-2013-1710 CRITICAL POC

CVE-2013-7389 MEDIUM POC

CVE-2021-25299 MEDIUM POC

CVE-2014-2120 MEDIUM

CVE-2023-40000 HIGH POC

CVE-2024-52875 HIGH POC

CVE-2016-8581 MEDIUM POC

Share

CVE-2022-43144 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy