CVE-2023-33580

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in the "Admin Name" field on Admin Profile page.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/173030/Student-Study-Center-Management-System-1.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/sudovivek/My-CVE/blob/main/CVE-2023-33580_exploit.md
https://phpgurukul.com/student-study-center-management-system-using-php-and-mysql/Product
https://www.exploit-db.com/exploits/51528Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/173030/Student-Study-Center-Management-System-1.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/sudovivek/My-CVE/blob/main/CVE-2023-33580_exploit.md
https://phpgurukul.com/student-study-center-management-system-using-php-and-mysql/Product
https://www.exploit-db.com/exploits/51528Third Party Advisory, VDB Entry

Timeline

Published: Jun 26, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-335849.8Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL q CVE-2023-33595.5An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the return value of kzall CVE-2023-335916.1User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the compo CVE-2023-335929.8Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=syste CVE-2023-335955.5CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.CVE-2023-335996.1EasyImages2.0 ≤ 2.8.1 is vulnerable to Cross Site Scripting (XSS) via viewlog.php.CVE-2023-33603.3The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections CVE-2023-336018.8An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP CVE-2023-336049.1Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php. This vu CVE-2023-33617.5A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML,CVE-2023-336135.5axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. This vulnerability al CVE-2023-336177.2An OS Command Injection vulnerability in Parks Fiberlink 210 firmware version V2.1.14_X000 was found via the /boaform/admin/formPing target_