A vulnerability was found in UCMS 1.4.7. It has been classified as problematic. Affected is an unknown function of the file ajax.php?do=strarraylist. The manipulation of the argument strdefault leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239856.
References
| Link | Resource |
|---|---|
| https://github.com/Num-Nine/CVE/issues/3 | Exploit Issue Tracking Third Party Advisory |
| https://vuldb.com/?ctiid.239856 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.239856 | Permissions Required Third Party Advisory |
Configurations
History
20 Sep 2023, 13:27
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ucms Project
Ucms Project ucms |
|
| CPE | cpe:2.3:a:ucms_project:ucms:1.4.7:*:*:*:*:*:*:* | |
| References | (MISC) https://github.com/Num-Nine/CVE/issues/3 - Exploit, Issue Tracking, Third Party Advisory | |
| References | (MISC) https://vuldb.com/?id.239856 - Permissions Required, Third Party Advisory | |
| References | (MISC) https://vuldb.com/?ctiid.239856 - Permissions Required, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
17 Sep 2023, 12:00
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-17 02:15
Updated : 2024-05-17 02:32
NVD link : CVE-2023-5015
Mitre link : CVE-2023-5015
CVE.ORG link : CVE-2023-5015
JSON object : View
Products Affected
ucms_project
- ucms
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')