cve/2023/CVE-2023-47446.md

18 lines
764 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2023-47446](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47446)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting (XSS) on the profile.php page via fullname parameter.
### POC
#### Reference
- https://github.com/termanix/PHPGrukul-Pre-School-Enrollment-System-v1.0/blob/main/CVE-2023-47446%20PHPGurukul-Pre-School-Enrollment-System-v1.0%20Stored%20XSS%20Vulnerability.md
#### Github
- https://github.com/termanix/PHPGrukul-Pre-School-Enrollment-System-v1.0