Lucene search

[email protected]CVE-2023-1561

HistoryMar 22, 2023 - 12:15 p.m.

CVE-2023-1561

2023-03-2212:15:10

CWE-434

[email protected]

web.nvd.nist.gov

cve-2023-1561

critical vulnerability

simple online hotel reservation system 1.0

unrestricted upload

remote attack

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.2%

JSON

A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file add_room.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. VDB-223554 is the identifier assigned to this vulnerability.

Affected configurations

Vulners

NVD

Node

code-projectssimple_online_hotel_reservation_systemMatch1.0

VendorProductVersionCPE
code\-projectssimple_online_hotel_reservation_system1.0cpe:2.3:a:code\-projects:simple_online_hotel_reservation_system:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
code\-projects	simple_online_hotel_reservation_system	1.0	cpe:2.3:a:code\-projects:simple_online_hotel_reservation_system:1.0:::::::*

CNA Affected

[
  {
    "vendor": "code-projects",
    "product": "Simple Online Hotel Reservation System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

References

github.com/sincere9/Bug-Hub/blob/main/SIMPLE%20ONLINE%20HOTEL%20RESERVATION%20SYSTEM/SIMPLE%20ONLINE%20HOTEL%20RESERVATION%20SYSTEM%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf

vuldb.com/?ctiid.223554

vuldb.com/?id.223554

Social References

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.2%

JSON

Related for CVE-2023-1561

nvd1 cvelist1 prion1