CVE-2020-5308 - PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php

Back Back to CVE browser

MEDIUM

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php

Published Jan 9, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 1.32%

Description

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

http://packetstormsecurity.com/files/155861/Dairy-Farm-Shop-Management-System-1.0-Cross-Site-Scripting.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://cinzinga.github.io/CVE-2020-5307-5308/
x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26494
Advisory
https://phpgurukul.com/dairy-farm-shop-management-system-using-php-and-mysql/
x_refsource_MISCProduct

Link	Providers	Tags
http://packetstormsecurity.com/files/155861/Dairy-Farm-Shop-Management-System-1.0-Cross-Site-Scripting.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://cinzinga.github.io/CVE-2020-5307-5308/		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26494		Advisory
https://phpgurukul.com/dairy-farm-shop-management-system-using-php-and-mysql/		x_refsource_MISCProduct