CVE-2023-0563

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219717 was assigned to this vulnerability.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
PHPGurukul	Bank Locker Management System	1.0

References

https://github.com/ctflearner/Vulnerability/blob/main/Bank_Locker_Management_System/BLMS_XSS_IN_ADMIN_BROWSER.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.219717Permissions Required
https://vuldb.com/?id.219717Third Party Advisory
https://github.com/ctflearner/Vulnerability/blob/main/Bank_Locker_Management_System/BLMS_XSS_IN_ADMIN_BROWSER.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.219717Permissions Required
https://vuldb.com/?id.219717Third Party Advisory

Timeline

Published: Jan 28, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-05647.5Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.CVE-2023-05654.9Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.CVE-2023-05664.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor prior to 2.0.10.CVE-2023-05676.2In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes a CVE-2023-05688.1In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. Wh CVE-2023-05696.5Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10.CVE-2023-05709.8A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects an CVE-2023-05715.4A vulnerability has been found in SourceCodester Canteen Management System 1.0 and classified as problematic. This vulnerability affects unk CVE-2023-05725.3Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.CVE-2023-05749.8Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of CVE-2023-05759.8External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in YugaByte, Inc. Yugabyte CVE-2023-05776.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ASOS Information Technologies SOBIAD a