CVE-2023-2098

CVE-2023-2098 affects SourceCodester Vehicle Service Management System 1.0. The vulnerability is an XSS in the file /inc/topBarNav.php caused by manipulation of the search parameter. It can be exploited remotely and the exploit has been disclosed publicly. Affected versions are not clearly enumer...

CVE-2023-2100

CVE-2023-2100 affects SourceCodester Vehicle Service Management System 1.0. The vulnerability resides in the /admin/report/index.php file where manipulating the date_end parameter triggers a cross-site scripting (XSS) condition. It is a remote exploit with the vulnerability publicly disclosed. Co...

CVE-2023-2094

CVE-2023-2094 affects SourceCodester Vehicle Service Management System 1.0. The vulnerability exists in the file /admin/mechanics/manage_mechanic.php, where manipulating the id parameter enables a SQL injection. This can be exploited remotely and is described as critical (CVSS 3.1/3.0 in sources)...