{"id":7626,"date":"2025-07-04T16:20:49","date_gmt":"2025-07-04T16:20:49","guid":{"rendered":"http:\/\/localhost\/?p=7626"},"modified":"2025-07-04T16:20:49","modified_gmt":"2025-07-04T16:20:49","slug":"codeastro-internet-banking-system-pagessystemsettingsphp-cross-site-scripting","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=7626","title":{"rendered":"CodeAstro Internet Banking System pages_system_settings.php cross site scripting"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nCodeAstro Internet Banking System pages_system_settings.php cross site scripting<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2023-10-22T22:00:08.748Z<\/td>\n<\/tr>\n
Modified<\/th>\n2024-08-02T08:07:32.437Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nCodeAstro<\/td>\n<\/tr>\n
Product<\/th>\nInternet Banking System<\/td>\n<\/tr>\n
Version<\/th>\n1.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n
Base Score<\/th>\n3.5 (LOW)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:R\/S:U\/C:N\/I:L\/A:N<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA cross-site scripting vulnerability in CodeAstro Internet Banking System 1.0 allows remote attackers to inject malicious scripts via the sys_name argument in pages_system_settings.php.<\/td>\n<\/tr>\n
AI Severity<\/th>\nLow<\/td>\n<\/tr>\n
AI Vendor<\/th>\nCodeAstro<\/td>\n<\/tr>\n
AI Product<\/th>\nInternet Banking System<\/td>\n<\/tr>\n
AI Version<\/th>\n1.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n
    \n
  • CodeAstro Internet Banking System 1.0<\/li>\n<\/ul>\n<\/div>\n
    \n

    Additional Information<\/h3>\n\n\n\n
    CWE List<\/th>\nCWE-79<\/td>\n<\/tr>\n
    Source<\/th>\nVulDB<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
    \n

    Description<\/h3>\n
    A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been classified as problematic. Affected is an unknown function of the file pages_system_settings.php. The manipulation of the argument sys_name with the input