CVE-2023-1042

A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /pet_shop/admin/orders/update_status.php. The manipulation of the argument oid with the input 1"><script>alert(1111)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221800.

• CWE-79

• https://github.com/hujianjie123/bug_report/blob/main/vendors/oretnom23/Online%20Pet%20Shop%20We%20App/XSS-1.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.221800Permissions Required
• https://vuldb.com/?id.221800Third Party Advisory
• https://github.com/hujianjie123/bug_report/blob/main/vendors/oretnom23/Online%20Pet%20Shop%20We%20App/XSS-1.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.221800Permissions Required
• https://vuldb.com/?id.221800Third Party Advisory

Published

Feb 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1036A vulnerability was found in SourceCodester Dental Clinic Ap…6.1
• CVE-2023-1037A vulnerability was found in SourceCodester Dental Clinic Ap…9.8
• CVE-2023-1038A vulnerability classified as critical has been found in Sou…9.8
• CVE-2023-1039A vulnerability classified as critical was found in SourceCo…8.8
• CVE-2023-1040A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-1041A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2023-1043A vulnerability was found in MuYuCMS 2.2. It has been classi…4.3
• CVE-2023-1044A vulnerability was found in MuYuCMS 2.2. It has been declar…8.8
• CVE-2023-1045A vulnerability was found in MuYuCMS 2.2. It has been rated …8.1
• CVE-2023-1046A vulnerability classified as critical has been found in MuY…8.8
• CVE-2023-1047A vulnerability classified as critical was found in TechPowe…7.8
• CVE-2023-1048A vulnerability, which was classified as critical, has been …7.8