CVE-2023-27666

CVSS V2 None CVSS V3 None

Description

Auto Dealer Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the name parameter at /classes/SystemSettings.php?f=update_settings.

Overview

CVE ID
CVE-2023-27666

Assigner
cve@mitre.org

Vulnerability Status
Analyzed

Published Version
2023-04-14T12:15:07

Last Modified Date
2023-04-21T20:11:34

Weakness Enumerations

CWE	URL
CWE-79	http://cwe.mitre.org/data/definitions/79.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:auto_dealer_management_system_project:auto_dealer_management_system:1.0:::::::*	1	OR

References

Reference URL	Reference Tags
http://auto.com
https://gist.github.com/Flower-fertilizer/a1fb260c02353906f2d2808656dd1559
https://www.sourcecodester.com/php/15371/auto-dealer-management-system-phpoop-free-source-code.html

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-27666
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27666

History

Created	Old Value	New Value	Data Type	Notes
2023-04-17 04:43:28				Added to TrackCVE
2023-04-18 16:00:44	Awaiting Analysis	Undergoing Analysis	Vulnerability Status	updated
2023-04-21 21:00:40		2023-04-21T20:11:34	CVE Modified Date	updated
2023-04-21 21:00:40	Undergoing Analysis	Analyzed	Vulnerability Status	updated
2023-04-21 21:00:42			Weakness Enumeration	new
2023-04-21 21:00:43			CPE Information	updated