2 lines
4.5 KiB
JSON
2 lines
4.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"Simple Food Ordering System","vendor":"SourceCodester","versions":[{"status":"affected","version":"1.0"}]}],"source":"cna@vuldb.com"},{"affectedData":[{"cpes":["cpe:2.3:a:simple_food_ordering_system_project:simple_food_ordering_system:1.0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"simple_food_ordering_system","vendor":"simple_food_ordering_system_project","versions":[{"status":"affected","version":"1.0"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:simple_food_ordering_system_project:simple_food_ordering_system:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1927F73F-FBCE-4B79-9409-B07BCF00348E","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file process_order.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221451."},{"lang":"es","value":"Se encontró una vulnerabilidad en SourceCodester Simple Food Ordering System 1.0. Ha sido clasificada como problemática. Esto afecta una parte desconocida del archivo process_order.php. La manipulación del argumento order conduce a Cross-Site Scripting. Es posible iniciar el ataque remotamente. El exploit ha sido divulgado al público y puede ser utilizado. El identificador asociado de esta vulnerabilidad es VDB-221451."}],"id":"CVE-2023-0902","lastModified":"2026-10-28T19:10:00.193","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":4.0,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":8.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":2.1,"impactScore":1.4,"source":"cna@vuldb.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-0902","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-07-12T16:02:31.889764Z","version":"2.0.3"}}]},"published":"2023-02-18T08:15:42.013","references":[{"source":"cna@vuldb.com","tags":["Exploit","Third Party Advisory"],"url":"https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Simple%20Food%20Ordering%20System%20-%20Authenticated%20Reflected%20XSS.md"},{"source":"cna@vuldb.com","tags":["Permissions Required","Third Party Advisory"],"url":"https://vuldb.com/?ctiid.221451"},{"source":"cna@vuldb.com","tags":["Third Party Advisory"],"url":"https://vuldb.com/?id.221451"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Simple%20Food%20Ordering%20System%20-%20Authenticated%20Reflected%20XSS.md"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"],"url":"https://vuldb.com/?ctiid.221451"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://vuldb.com/?id.221451"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"cna@vuldb.com","type":"Secondary"}]}
|