CVE-2023-2099

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226107.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Apr 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-209904.4In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local iCVE-2023-209914.4In btm_ble_process_periodic_adv_sync_lost_evt of ble_scanner_hci_interface.cc , there is a possible out of bounds read due to a missing bounCVE-2023-209924.5In on_iso_link_quality_read of btm_iso_impl.h, there is a possible out of bounds read due to a missing bounds check. This could lead to locaCVE-2023-209937.8In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. This could lead toCVE-2023-209946.7In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could leadCVE-2023-209957.8In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error in the code. This couCVE-2023-209965.5In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to locaCVE-2023-209975.5In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to locaCVE-2023-209985.5In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to locaCVE-2023-209995.5In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to locaCVE-2023-21006.1A vulnerability classified as problematic was found in SourceCodester Vehicle Service Management System 1.0. This vulnerability affects unknCVE-2023-210007.8In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no addi
CVE-2023-2099: Medium severity, CVSS 6.1 | Vulnix