CVE-2023-34486

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-34486
itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to Cross Site Scripting (XSS). Remote code execution can be achieved by entering malicious code in the date selection box.

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://github.com/JunyanYip/itsourcecode_justines_xss_vul Exploit Third Party Advisory
https://github.com/JunyanYip/itsourcecode_justines_xss_vul Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:online_hotel_management_system_project:online_hotel_management_system:1.0.0:*:*:*:*:*:*:*
History

21 Nov 2024, 08:07

Type Values Removed Values Added
References () https://github.com/JunyanYip/itsourcecode_justines_xss_vul - Exploit, Third Party Advisory () https://github.com/JunyanYip/itsourcecode_justines_xss_vul - Exploit, Third Party Advisory
Information

Published : 2023-06-29 14:15

Updated : 2024-11-21 08:07

NVD link : CVE-2023-34486

Mitre link : CVE-2023-34486

CVE.ORG link : CVE-2023-34486

JSON object : View

Products Affected

online_hotel_management_system_project

  • online_hotel_management_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')