medium4.8Public exploit code
CVE-2023-33580
Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in the "Admin Name" field on Admin Profile page.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Student Study Center Management System v1.0 - Stored Cross-Site Scripting (XSS)2023-06-19 · webapps · php · Verified
Impact
Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in the "Admin Name" field on Admin Profile page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgurukul | Student Study Center Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/173030/Student-Study-Center-Management-System-1.0-Cross-Site-Scripting.html
- https://github.com/sudovivek/My-CVE/blob/main/CVE-2023-33580_exploit.md
- https://phpgurukul.com/student-study-center-management-system-using-php-and-mysql/
- https://www.exploit-db.com/exploits/51528
- http://packetstormsecurity.com/files/173030/Student-Study-Center-Management-System-1.0-Cross-Site-Scripting.html
- https://github.com/sudovivek/My-CVE/blob/main/CVE-2023-33580_exploit.md
- https://phpgurukul.com/student-study-center-management-system-using-php-and-mysql/
- https://www.exploit-db.com/exploits/51528