CVE-2023-0840

CVSS V2 None CVSS V3 None
Description
A vulnerability classified as problematic was found in PHPCrazy 1.1.1. This vulnerability affects unknown code of the file admin/admin.php?action=users&mode=info&user=2. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221086 is the identifier assigned to this vulnerability.
Overview
  • CVE ID
  • CVE-2023-0840
  • Assigner
  • cna@vuldb.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-02-15T14:15:13
  • Last Modified Date
  • 2023-02-23T04:53:03
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:phpcrazy_project:phpcrazy:1.1.1:*:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://github.com/whiex/asdaszdfadsaf/blob/main/PHPCrazyCMS%20storage%20CSRF.docx Broken Link
https://vuldb.com/?ctiid.221086 Third Party Advisory
https://vuldb.com/?id.221086 Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-0840
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0840
History
Created Old Value New Value Data Type Notes
2023-04-17 07:47:25 Added to TrackCVE
2023-04-17 07:47:28 Weakness Enumeration new
2023-04-17 08:22:18 CVSS V3 information new
2023-04-17 08:22:18 CVSS V2 information new