CVE-2023-34486

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-34486
itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to Cross Site Scripting (XSS). Remote code execution can be achieved by entering malicious code in the date selection box.

6.1 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://github.com/JunyanYip/itsourcecode_justines_xss_vul Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:online_hotel_management_system_project:online_hotel_management_system:1.0.0:*:*:*:*:*:*:*
History

06 Jul 2023, 18:32

Type Values Removed Values Added
CWE CWE-79
CPE cpe:2.3:a:online_hotel_management_system_project:online_hotel_management_system:1.0.0:*:*:*:*:*:*:*
First Time Online Hotel Management System Project
Online Hotel Management System Project online Hotel Management System
References (MISC) https://github.com/JunyanYip/itsourcecode_justines_xss_vul - (MISC) https://github.com/JunyanYip/itsourcecode_justines_xss_vul - Exploit, Third Party Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.1

29 Jun 2023, 15:35

Type Values Removed Values Added
New CVE
Information

Published : 2023-06-29 14:15

Updated : 2023-07-06 18:32

NVD link : CVE-2023-34486

Mitre link : CVE-2023-34486

JSON object : View

Products Affected

online_hotel_management_system_project

  • online_hotel_management_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')