by Kastro
Paper/Archive/CVE-2023-6886

CVE-2023-6886

xnx3 wangmarket — xnx3 wangmarket Role Management Page code injection

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 58.2.582 × 2011.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A vulnerability was found in xnx3 wangmarket 6.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component Role Management Page. The manipulation leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-248246 is the identifier assigned to this vulnerability.

Affected

ProductAffectedFixed inSource
wangmarket6.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulDB (CNA)4.7CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
VulDB (CNA)4.7CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

References

refvuldb.com/?id.248246refvuldb.com/?ctiid.248246exploitgithub.com/xnx3/wangmarket/issues/8