CVE-2023-2100

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in SourceCodester Vehicle Service Management System 1.0. This vulnerability affects unknown code of the file /admin/report/index.php. The manipulation of the argument date_end leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226108.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
SourceCodester	Vehicle Service Management System	1.0

References

https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%209.pdfExploit
https://vuldb.com/?ctiid.226108Permissions Required, Third Party Advisory
https://vuldb.com/?id.226108Third Party Advisory
https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%209.pdfExploit
https://vuldb.com/?ctiid.226108Permissions Required, Third Party Advisory
https://vuldb.com/?id.226108Third Party Advisory

Timeline

Published: Apr 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-210007.8In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no addi CVE-2023-210017.8In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due CVE-2023-210027.8In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission chec CVE-2023-210037.8In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission chec CVE-2023-210047.8In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission chec CVE-2023-210057.8In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission chec CVE-2023-210064.4In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor CVE-2023-210074.4In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor CVE-2023-210084.4In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor CVE-2023-210094.4In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor CVE-2023-21016.5A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2. This issue affects the function uplo CVE-2023-210104.4In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor