CVE-2023-2155

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file classes/Master.php?f=save_cargo_type. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226276.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Apr 18, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-215505.5Windows Cryptographic Information Disclosure VulnerabilityCVE-2023-215517.8Microsoft Cryptographic Services Elevation of Privilege VulnerabilityCVE-2023-215527.8Windows GDI Elevation of Privilege VulnerabilityCVE-2023-215537.5Azure DevOps Server Remote Code Execution VulnerabilityCVE-2023-215549.8Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2023-215558.1Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityCVE-2023-215568.1Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityCVE-2023-215577.5Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityCVE-2023-215587.8Windows Error Reporting Service Elevation of Privilege VulnerabilityCVE-2023-215595.5Windows Cryptographic Information Disclosure VulnerabilityCVE-2023-21567.5A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack oCVE-2023-215606.6Windows Boot Manager Security Feature Bypass Vulnerability
CVE-2023-2155: Medium severity, CVSS 4.8 | Vulnix