leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-230349 was assigned to this vulnerability.", "datePublished": "2023-05-31T09:00:05Z", "dateModified": "2024-08-02T06:41:04Z", "keywords": "CVE-2023-3005, vulnerability, CVE, security, Local Service Search Engine Management System, SourceCodester", "about": { "@type": "SoftwareApplication", "name": "Local Service Search Engine Management System", "applicationCategory": "SecurityApplication", "operatingSystem": "All" } }
CVE-2023-3005 LOW

CVE-2023-3005: SourceCodester Local Service Search Engine Management System POST Parameter cross site scripting

Vendor Sourcecodester
Product Local Service Search Engine Management System
Weakness CWE-79 · XSS
Published May 31, 2023
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

3.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability, which was classified as problematic, was found in SourceCodester Local Service Search Engine Management System 1.0. This affects an unknown part of the file /admin/ajax.php?action=save_area of the component POST Parameter Handler. The manipulation of the argument area with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-230349 was assigned to this vulnerability.

Key dates

02Disclosure timeline

May 31, 2023 CVE published
August 2, 2024 Record updated