CVE-2023-5697

Summary

CVE-2023-5697 is a newly disclosed vulnerability affecting the CodeAstro Internet Banking System 1.0. The issue lies within the pages_withdraw_money.php file, where the argument 'account_number' is susceptible to cross-site scripting (XSS) attacks. An input of the form '287359614--><ScRiPt%20>alert(1234)</ScRiPt><!--' can manipulate the code and inject malicious scripts. This vulnerability is remote and publicly disclosed, posing a significant risk. The associated identifier for this vulnerability is VDB-243135.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.