CVE-2023-1030

· LOWModified

← All CVEs

CVSS v3.1

3.5

CVSS v4.0

5.1

EPSS

0.65%

Published

Feb 24, 2023

Modified

Apr 3, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-79CWE-94

Affected Products (1)

online_boat_reservation_system_project · online_boat_reservation_systemvulnerable

References (7)

https://github.com/jidle123/bug_report/blob/main/vendors/winex01/Online%20Boat%20Reservation%20System/XSS-1.md#online-boat-reservation-system-v10-by-winex01-has-cross-site-scripting-reflected

ExploitThird Party Advisory

https://vuldb.com/?ctiid.221755

Permissions RequiredThird Party AdvisoryVDB Entry

https://vuldb.com/?id.221755