VYPR
leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224747.","additionalType":"https://schema.org/SoftwareApplication","sameAs":["https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1795"]},"keywords":"CVE-2023-1795, Low, Sourcecodester Gadget Works Online Ordering System, Sourcecodester Gadget Works Online Ordering System","mentions":[{"@type":"SoftwareApplication","name":"Gadget Works Online Ordering System","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"Sourcecodester"}},{"@type":"SoftwareApplication","name":"Gadget Works Online Ordering System","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"Sourcecodester"}}],"isAccessibleForFree":true},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://portal.vyprsec.ai/"},{"@type":"ListItem","position":2,"name":"CVEs","item":"https://portal.vyprsec.ai/cves"},{"@type":"ListItem","position":3,"name":"CVE-2023-1795","item":"https://portal.vyprsec.ai/cves/CVE-2023-1795"}]}]}
← All advisories
Low severity3.5NVD Advisory· Published Apr 2, 2023· Updated Jun 17, 2026

CVE-2023-1795

CVE-2023-1795

Description

A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/products/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224747.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.