SourceCodester User Registration and Login System delete-user.php cross site scripting

Successful exploitation of CVE-2023-6462 allows an attacker to execute arbitrary JavaScript code within the context of a victim's browser session. This can lead to various malicious activities, including session hijacking, credential theft, and defacement of the application. The attacker could potentially steal sensitive user data, such as usernames, passwords, and personal information. Given the nature of XSS, the impact can range from minor annoyance to complete compromise of the application and its users, depending on the attacker's goals and the privileges of the affected user.

Organizations utilizing SourceCodester User Registration and Login System in their applications, particularly those with user-facing features and sensitive data, are at risk. Shared hosting environments where multiple users share the same server instance are especially vulnerable, as a compromised user account could potentially impact other users on the same server.

• php / web:

curl -I 'http://your-website.com/endpoint/delete-user.php?user=<script>alert(1)</script>' | grep -i 'content-type'

• generic web:

curl -s 'http://your-website.com/endpoint/delete-user.php?user=<script>alert(1)</script>' | grep 'alert(1)'

1. 2023-12-01Disclosure

   disclosure

2. 2023-12-01Patch

   patch

1. Gereserveerd2023-12-01
2. Gepubliceerd2023-12-01
3. Gewijzigd2024-08-02
4. EPSS bijgewerkt2026-04-02

The primary mitigation for CVE-2023-6462 is to upgrade to version 1.0.1 of the SourceCodester User Registration and Login System. If upgrading is not immediately feasible, consider implementing input validation and output encoding on the /endpoint/delete-user.php file to sanitize user-supplied data. Web application firewalls (WAFs) configured to detect and block XSS payloads can also provide a temporary layer of protection. Regularly review and update security policies and procedures to prevent similar vulnerabilities from arising in the future. After upgrade, confirm functionality by attempting to delete a user account and verifying that no malicious scripts are executed.