Lost And Found Information System
CVE-2023-36159
MEDIUM
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Lifecycle Timeline
1DescriptionNVD
Cross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page.
AnalysisAI
Cross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. Cross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page. Affected products include: Oretnom23 Lost And Found Information System.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.
SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via
Lost and Found Information System 1.0 allows account takeover via username and password to a /classes/Users.php?f=save U
Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lf
A vulnerability, which was classified as critical, has been found in SourceCodester Lost and Found Information System 1.
A vulnerability classified as critical was found in SourceCodester Lost and Found Information System 1.0. Rated critical
A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Rated cri
A vulnerability was found in SourceCodester Lost and Found Information System 1.0. Rated critical severity (CVSS 9.8), t
A vulnerability was found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Rated crit
A vulnerability classified as critical was found in SourceCodester Lost and Found Information System 1.0. Rated critical
A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Rated cri
SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via
A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Rated
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today