CVE-2023-5696

Summary

CVE-2023-5696 is a newly disclosed vulnerability affecting the CodeAstro Internet Banking System 1.0. This issue, which has been rated as problematic, impacts an unspecified functionality of the pages_transfer_money.php file. The manipulation of the argument "account_number" with the input "357146928--><ScRiPt%20>alert(9206)</ScRiPt><!--" triggers a cross-site scripting (XSS) attack, making it possible for remote attackers to execute malicious code on users' browsers. The vulnerability has been publicly disclosed, increasing the risk of exploitation. VDB-243134 is the identifier assigned to this XSS flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.