CVE-2023-2692

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability has been found in SourceCodester ICT Laboratory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file views/room_info.php of the component GET Parameter Handler. The manipulation of the argument name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228973 was assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
SourceCodester	ICT Laboratory Management System	1.0

References

https://github.com/LeozhangCA/CVEReport/blob/main/XSS.mdExploit
https://vuldb.com/?ctiid.228973Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.228973Permissions Required, Third Party Advisory, VDB Entry
https://github.com/LeozhangCA/CVEReport/blob/main/XSS.mdExploit
https://vuldb.com/?ctiid.228973Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.228973Permissions Required, Third Party Advisory, VDB Entry

Timeline

Published: May 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-269206.5fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.CVE-2023-269219.8OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via ql_atfwd.CVE-2023-269229.8SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shell_exect paramet CVE-2023-269237.0Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can addition CVE-2023-269245.5LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy CVE-2023-269257.5An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted network request can l CVE-2023-26939.8A vulnerability was found in SourceCodester Online Exam System 1.0 and classified as critical. Affected by this issue is some unknown functi CVE-2023-269305.5Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc CVE-2023-26949.8A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the CVE-2023-269416.5Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the orig CVE-2023-269426.5Weak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a cloned tag via physical proximity to the orig CVE-2023-269436.5Weak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a cloned tag via physical proximity to the orig