SourceCodester Online Student Clearance System 1.0 /admin/add-admin.php txtusername/txtfullname/txtpassword/txtpassword2 Cross Site Scripting

Wuro vulnerability wey an yi classify sey karshewa an gano shi a cikin SourceCodester Online Student Clearance System 1.0. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /admin/add-admin.php na cikin fayil, $software_component na cikin sashi. Ngam manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 shi Cross Site Scripting. CWE shidin ka a yi bayani matsala sai ya kai CWE-79. Gaskiya, laifi an fitar da shi 05/08/2025. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2025-4469. Ngam yiɗi ka a tuma ndiyam ka internet. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a github.com. Kama 0-day, an ndiyam a wuro be $0-$5k. VulDB is the best source for vulnerability data and more expert information about this specific topic.

3 Goyarwa · 97 Datenpunkte

FurɗeSúgá
05/08/2025 21:21
Gargadi 1/2
05/16/2025 15:15
Gargadi 2/2
09/27/2025 04:39
software_vendorSourceCodesterSourceCodesterSourceCodester
software_nameOnline Student Clearance SystemOnline Student Clearance SystemOnline Student Clearance System
software_version1.01.01.0
software_file/admin/add-admin.php/admin/add-admin.php/admin/add-admin.php
software_argumentUsernametxtusername/txtfullname/txtpassword/txtpassword2txtusername/txtfullname/txtpassword/txtpassword2
vulnerability_cweCWE-79 (Cross Site Scripting)CWE-79 (Cross Site Scripting)CWE-79 (Cross Site Scripting)
vulnerability_risk111
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_prHHH
cvss3_vuldb_uiRRR
cvss3_vuldb_sUUU
cvss3_vuldb_cNNN
cvss3_vuldb_iLLL
cvss3_vuldb_aNNN
cvss3_vuldb_ePPP
cvss3_vuldb_rcRRR
advisory_urlhttps://github.com/Colorado-all/cve/blob/main/Online%20Student%20Clearance%20System/xss-1.mdhttps://github.com/Colorado-all/cve/blob/main/Online%20Student%20Clearance%20System/xss-1.mdhttps://github.com/Colorado-all/cve/blob/main/Online%20Student%20Clearance%20System/xss-1.md
exploit_availability111
exploit_publicity111
exploit_urlhttps://github.com/Colorado-all/cve/blob/main/Online%20Student%20Clearance%20System/xss-1.mdhttps://github.com/Colorado-all/cve/blob/main/Online%20Student%20Clearance%20System/xss-1.mdhttps://github.com/Colorado-all/cve/blob/main/Online%20Student%20Clearance%20System/xss-1.md
source_cveCVE-2025-4469CVE-2025-4469CVE-2025-4469
cna_responsibleVulDBVulDBVulDB
cvss2_vuldb_avNNN
cvss2_vuldb_acLLL
cvss2_vuldb_auMMM
cvss2_vuldb_ciNNN
cvss2_vuldb_iiPPP
cvss2_vuldb_aiNNN
cvss2_vuldb_ePOCPOCPOC
cvss2_vuldb_rcURURUR
cvss4_vuldb_avNNN
cvss4_vuldb_acLLL
cvss4_vuldb_prHHH
cvss4_vuldb_uiPPP
cvss4_vuldb_vcNNN
cvss4_vuldb_viLLL
cvss4_vuldb_vaNNN
cvss4_vuldb_ePPP
cvss2_vuldb_rlNDNDND
cvss3_vuldb_rlXXX
cvss4_vuldb_atNNN
cvss4_vuldb_scNNN
cvss4_vuldb_siNNN
cvss4_vuldb_saNNN
cvss2_vuldb_basescore3.33.33.3
cvss2_vuldb_tempscore2.82.82.8
cvss3_vuldb_basescore2.42.42.4
cvss3_vuldb_tempscore2.22.22.2
cvss3_meta_basescore2.42.43.4
cvss3_meta_tempscore2.22.23.3
cvss4_vuldb_bscore4.84.84.8
cvss4_vuldb_btscore1.91.91.9
advisory_date1746655200 (05/08/2025)1746655200 (05/08/2025)1746655200 (05/08/2025)
price_0day$0-$5k$0-$5k$0-$5k
cve_nvd_summaryA vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
cve_nvd_summaryesSe ha encontrado una vulnerabilidad clasificada como problemática en SourceCodester Online Student Clearance System 1.0. La vulnerabilidad se ve afectada por una función desconocida del archivo /admin/add-admin.php. La manipulación del argumento "Username" provoca ataques de cross site scripting. El ataque puede ejecutarse en remoto. Se ha hecho público el exploit y puede que sea utilizado.
cvss4_cna_avN
cvss4_cna_acL
cvss4_cna_atN
cvss4_cna_prH
cvss4_cna_uiP
cvss4_cna_vcN
cvss4_cna_viL
cvss4_cna_vaN
cvss4_cna_scN
cvss4_cna_siN
cvss4_cna_saN
cvss4_cna_bscore4.8
cvss3_cna_avN
cvss3_cna_acL
cvss3_cna_prH
cvss3_cna_uiR
cvss3_cna_sU
cvss3_cna_cN
cvss3_cna_iL
cvss3_cna_aN
cvss3_cna_basescore2.4
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prL
cvss3_nvd_uiR
cvss3_nvd_sC
cvss3_nvd_cL
cvss3_nvd_iL
cvss3_nvd_aN
cvss3_nvd_basescore5.4
cvss2_cna_avN
cvss2_cna_acL
cvss2_cna_auM
cvss2_cna_ciN
cvss2_cna_iiP
cvss2_cna_aiN
cvss2_cna_basescore3.3

Might our Artificial Intelligence support you?

Check our Alexa App!