Vulnerabilities > CVE-2023-1042 - Unspecified vulnerability in Online PET Shop WE APP Project Online PET Shop WE APP 1.0

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
online-pet-shop-we-app-project
NVD
Published: 2023-02-26
Updated: 2024-11-21

Summary

A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /pet_shop/admin/orders/update_status.php. The manipulation of the argument oid with the input 1"><script>alert(1111)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221800.

Vulnerable Configurations

Part Description Count
Application
Online_Pet_Shop_We_App_Project
1

References