VYPR
leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-230349 was assigned to this vulnerability.","additionalType":"https://schema.org/SoftwareApplication","sameAs":["https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3005"]},"keywords":"CVE-2023-3005, Low, CWE-79, Local Service Search Engine Management System Project Local Service Search Engine Management System, Sourcecodester Local Service Search Engine Management System, Sourcecodester Local Service Search Engine Management System","mentions":[{"@type":"SoftwareApplication","name":"Local Service Search Engine Management System","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"Local Service Search Engine Management System Project"}},{"@type":"SoftwareApplication","name":"Local Service Search Engine Management System","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"Sourcecodester"}},{"@type":"SoftwareApplication","name":"Local Service Search Engine Management System","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"Sourcecodester"}}],"isAccessibleForFree":true},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://portal.vyprsec.ai/"},{"@type":"ListItem","position":2,"name":"CVEs","item":"https://portal.vyprsec.ai/cves"},{"@type":"ListItem","position":3,"name":"CVE-2023-3005","item":"https://portal.vyprsec.ai/cves/CVE-2023-3005"}]}]}
← All advisories
Low severity3.5NVD Advisory· Published May 31, 2023· Updated Jun 17, 2026

CVE-2023-3005

CVE-2023-3005

Description

A vulnerability, which was classified as problematic, was found in SourceCodester Local Service Search Engine Management System 1.0. This affects an unknown part of the file /admin/ajax.php?action=save_area of the component POST Parameter Handler. The manipulation of the argument area with the input leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-230349 was assigned to this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.