CVE-2023-3309

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file ?page=rooms of the component Manage Room Page. The manipulation of the argument Cottage Number leads to cross site scripting. The attack can be launched remotely. The identifier VDB-231805 was assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
SourceCodester	Resort Reservation System	1.0

References

https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3309Exploit
https://vuldb.com/?ctiid.231805Third Party Advisory
https://vuldb.com/?id.231805Third Party Advisory
https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3309Exploit
https://vuldb.com/?ctiid.231805Third Party Advisory
https://vuldb.com/?id.231805Third Party Advisory
https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3309Exploit

Timeline

Published: Jun 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-330905.5Transient DOS while processing channel information for speaker protection v2 module in ADSP.CVE-2023-330927.8Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.CVE-2023-330947.8Memory corruption while running VK synchronization with KASAN enabled.CVE-2023-330957.5Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.CVE-2023-330967.5Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.CVE-2023-330977.5Transient DOS in WLAN Firmware while processing a FTMR frame.CVE-2023-330987.5Transient DOS while parsing WPA IES, when it is passed with length more than expected size.CVE-2023-330997.5Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.CVE-2023-33108.8A vulnerability, which was classified as critical, has been found in code-projects Agro-School Management System 1.0. Affected by this issue CVE-2023-331007.5Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.CVE-2023-331017.5Transient DOS while processing DL NAS TRANSPORT message with payload length 0.CVE-2023-331037.5Transient DOS while processing CAG info IE received from NW.