CVE-2022-45613

CVSS V2 None CVSS V3 None

Description

Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter.

Overview

CVE ID
CVE-2022-45613

Assigner
cve@mitre.org

Vulnerability Status
Analyzed

Published Version
2023-01-18T18:15:10

Last Modified Date
2023-01-25T19:28:59

Weakness Enumerations

CWE	URL
CWE-79	http://cwe.mitre.org/data/definitions/79.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:book_store_management_system_project:book_store_management_system:1.0:::::::*	1	OR

References

Reference URL	Reference Tags
https://github.com/lithonn/bug-report/tree/main/vendors/oretnom23/bsms_ci/stored-xss
https://medium.com/@just0rg/book-store-management-system-1-0-unrestricted-input-leads-to-xss-74506d42492e

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-45613
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45613

History

Created	Old Value	New Value	Data Type	Notes
2023-01-18 18:18:35				Added to TrackCVE
2023-01-18 20:14:15		2023-01-18T19:46:26	CVE Modified Date	updated
2023-01-18 20:14:15	Received	Awaiting Analysis	Vulnerability Status	updated
2023-01-24 21:14:58	Awaiting Analysis	Undergoing Analysis	Vulnerability Status	updated
2023-01-25 20:13:48		2023-01-25T19:28:59	CVE Modified Date	updated
2023-01-25 20:13:48	Undergoing Analysis	Analyzed	Vulnerability Status	updated
2023-01-25 20:13:49			Weakness Enumeration	new
2023-01-25 20:13:51			CPE Information	updated