A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and...
Product
code-projects record management system vulnerabilities
3 published CVES affecting code-projects record management system, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 2
- Unscored
- 0
- CISA KEV
- 0
Latest code-projects record management system CVEs
Newest publication first
-
MediumCVSS 5.3
-
CVE-2023-7136 code-projects Record Management System Document Type doctype.php cross site scripting
PublishedLowCVSS 2.4A vulnerability classified as problematic was found in code-projects Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /main/doctype.php of the component Document Type Handler. The manipulation of the argument docname with the in...
-
CVE-2023-7135 code-projects Record Management System Offices offices.php cross site scripting
PublishedLowCVSS 2.4A vulnerability classified as problematic has been found in code-projects Record Management System 1.0. Affected is an unknown function of the file /main/offices.php of the component Offices Handler. The manipulation of the argument officename with the input "><script src="https:...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.