CVE-2023-5305

A vulnerability was found in Online Banquet Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /mail.php of the component Contact Us Page. The manipulation of the argument message leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-240944.
References
Link Resource
https://vuldb.com/?ctiid.240944 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?id.240944 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?ctiid.240944 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?id.240944 Permissions Required Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:anujk305:online_banquet_booking_system:1.0:*:*:*:*:*:*:*

History

21 Nov 2024, 08:41

Type Values Removed Values Added
References () https://vuldb.com/?ctiid.240944 - Permissions Required, Third Party Advisory, VDB Entry () https://vuldb.com/?ctiid.240944 - Permissions Required, Third Party Advisory, VDB Entry
References () https://vuldb.com/?id.240944 - Permissions Required, Third Party Advisory, VDB Entry () https://vuldb.com/?id.240944 - Permissions Required, Third Party Advisory, VDB Entry
CVSS v2 : 4.0
v3 : 6.1
v2 : 4.0
v3 : 3.5

02 Oct 2023, 20:21

Type Values Removed Values Added
CPE cpe:2.3:a:anujk305:online_banquet_booking_system:1.0:*:*:*:*:*:*:*
First Time Anujk305 online Banquet Booking System
Anujk305
References (MISC) https://vuldb.com/?id.240944 - (MISC) https://vuldb.com/?id.240944 - Permissions Required, Third Party Advisory, VDB Entry
References (MISC) https://vuldb.com/?ctiid.240944 - (MISC) https://vuldb.com/?ctiid.240944 - Permissions Required, Third Party Advisory, VDB Entry
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.1

30 Sep 2023, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-09-30 15:15

Updated : 2024-11-21 08:41


NVD link : CVE-2023-5305

Mitre link : CVE-2023-5305

CVE.ORG link : CVE-2023-5305


JSON object : View

Products Affected

anujk305

  • online_banquet_booking_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')