CVE-2023-3794

A vulnerability classified as problematic has been found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected is an unknown function of the file /chaincity/user/ticket/create of the component New Ticket Handler. The manipulation of the argument subject leads to cross site scripting. It is possible to launch the attack remotely. VDB-235062 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79

• https://vuldb.com/?ctiid.235062Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235062Third Party Advisory
• https://vuldb.com/?ctiid.235062Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235062Third Party Advisory

Published

Jul 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37933An improper neutralization of input during web page generati…6.1
• CVE-2023-37934An allocation of resources without limits or throttling vuln…6.5
• CVE-2023-37935A use of GET request method with sensitive query strings vul…7.5
• CVE-2023-37936A use of hard-coded cryptographic key in Fortinet FortiSwitc…9.8
• CVE-2023-37937An improper neutralization of special elements used in an os…7.8
• CVE-2023-37939An exposure of sensitive information to an unauthorized acto…3.3
• CVE-2023-37940Cross-site scripting (XSS) vulnerability in the edit Service…4.8
• CVE-2023-37941If an attacker gains write access to the Apache Superset met…6.6
• CVE-2023-37942Jenkins External Monitor Job Type Plugin 206.v9a_94ff0b_4a_1…6.5
• CVE-2023-37943Jenkins Active Directory Plugin 2.30 and earlier ignores the…5.9
• CVE-2023-37944A missing permission check in Jenkins Datadog Plugin 5.4.1 a…6.5
• CVE-2023-37945A missing permission check in Jenkins SAML Single Sign On(SS…4.3