CVE-2023-3783

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in Webile 1.0.1. It has been classified as problematic. Affected is an unknown function of the component HTTP POST Request Handler. The manipulation of the argument new_file_name/c leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-235050 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	Webile	1.0.1

References

https://seclists.org/fulldisclosure/2023/Jul/38Exploit, Mailing List, Third Party Advisory
https://vuldb.com/?ctiid.235050Third Party Advisory
https://vuldb.com/?id.235050Third Party Advisory
https://www.vulnerability-lab.com/get_content.php?id=2321Exploit, Third Party Advisory
https://seclists.org/fulldisclosure/2023/Jul/38Exploit, Mailing List, Third Party Advisory
https://vuldb.com/?ctiid.235050Third Party Advisory
https://vuldb.com/?id.235050Third Party Advisory
https://www.vulnerability-lab.com/get_content.php?id=2321Exploit, Third Party Advisory

Timeline

Published: Jul 20, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-378306.1A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitra CVE-2023-378315.3An issue discovered in Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user accounts based on server responses when credent CVE-2023-378327.5A lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user credentials via brute force and cause other un CVE-2023-378332.7Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits that are only accessed CVE-2023-378366.5libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. This vulnerability allo CVE-2023-378376.5libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp. Th CVE-2023-378399.8An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via u CVE-2023-37845.4A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an un CVE-2023-378479.8novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.CVE-2023-378496.5A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via pla CVE-2023-37855.4A vulnerability was found in PaulPrinting CMS 2018. It has been rated as problematic. Affected by this issue is some unknown functionality. CVE-2023-378554.3In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read