Published: 11/07/2023 Updated: 21/07/2023

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 0

Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote malicious user to execute arbitrary code via a crafted script to the mc parameter of the URL.

Vulnerable Product	Search on Vulmon	Subscribe to Product
buildagate project buildagate 5

# Exploit Title: BuildaGate5library v5 - Reflected Cross-Site Scripting (XSS) # Date: 06/07/2023 # Exploit Author: Idan Malihi # Vendor Homepage: None # Version: 5 # Tested on: Microsoft Windows 10 Pro # CVE : CVE-2023-36163 #PoC: An attacker just needs to find the vulnerable parameter (mc=) and inject the JS code like: '><script>prompt(" ...

The BuildaGate5 library suffers from a cross site scripting vulnerability ...

Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL

Exploit Title: BuildaGate5library - Reflected Cross-Site Scripting (XSS) Date: 06/07/2023 Exploit Author: Idan Malihi Vendor Homepage: None Version: 5 Tested on: Microsoft Windows 10 Pro CVE: CVE-2023-36163 PoC: An attacker needs to find the vulnerable parameter (mc=) and inject the JS code like: '><script>prompt("XSS");</script&gt

CWE-79 https://github.com/TraiLeR2?tab=overview&from=2023-05-01&to=2023-05-31 https://afula.libraries.co.il/BuildaGate5library/general2/company_search_tree.php?mc=0 http://www.levi-coins.co.il/BuildaGate5/general2/company_search_tree.php?SiteName=levicoins http://www.misdar-jabo.org/BuildaGate5/general2/company_search_tree.php?NewNameMade=0&SiteName=misdar&lan=en&EnterDefault=&Referral=tree&BuyerID=104732450&Clubtmp1=&SearchTop=http://packetstormsecurity.com/files/173366/BuildaGate5-Cross-Site-Scripting.html https://nvd.nist.gov https://github.com/TraiLeR2/CVE-2023-36163 https://www.exploit-db.com/exploits/51581

CVE-2023-36163

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect