Vulnerability Details CVE-2020-23832
A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an admin session upon an admin login.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 79.2%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- https://github.com/projectworlds32/Car-Rental-Syatem-PHP-MYSQL/archive/master.zip
- https://packetstormsecurity.com/files/158795/Car-Rental-Management-System-1.0-Cross-Site-Scripting.html
- https://projectworlds.in
- https://github.com/projectworlds32/Car-Rental-Syatem-PHP-MYSQL/archive/master.zip
- https://packetstormsecurity.com/files/158795/Car-Rental-Management-System-1.0-Cross-Site-Scripting.html
- https://projectworlds.in
Products affected by CVE-2020-23832
-
cpe:2.3:a:car_rental_management_system_project:car_rental_management_system:1.0