CVE-2023-4193

CVE-2023-4193 affects SourceCodester Resort Reservation System 1.0, specifically the file view_fee.php. The vulnerability arises from manipulating the id parameter to trigger SQL injection, enabling remote exploitation. The entry notes a public exploit and a high-severity impact (NVD CVSS v3.1 ba...

CVE-2023-43458

CVE-2023-43458 describes a cross-site scripting (XSS) vulnerability in the Resort Reservation System v1.0. The issue affects the input handling in the manage_room function, where parameters such as room, name, and description can be manipulated to execute arbitrary code in a victim’s browser. The...

CVE-2023-4191

CVE-2023-4191 affects SourceCodester Resort Reservation System 1.0. The issue is a file inclusion vulnerability in an unknown function of index.php triggered by manipulating the page argument. It can be exploited remotely; exploits have been disclosed publicly. Connected sources consistently desc...

CVE-2023-3309

CVE-2023-3309 affects SourceCodester Resort Reservation System 1.0 with a cross-site scripting flaw in the Manage Room Page (?page=rooms). The vulnerability arises from manipulating the Cottage Number argument, enabling remote exploitation. Multiple connected records confirm the issue; a PoC is i...

CVE-2023-4192

CVE-2023-4192 affects SourceCodester Resort Reservation System 1.0, specifically the manage_user.php page. The vulnerability arises from unsafe handling of the id parameter, enabling SQL injection and remote exploitation. Multiple sources confirm a publicly disclosed exploit/vector. Impact is sta...

CVE-2023-2364

CVE-2023-2364 affects SourceCodester Resort Reservation System 1.0. The vulnerability is in an unknown function of registration.php, where manipulating the fullname parameter leads to cross-site scripting. It can be exploited remotely and public exploit information exists. Multiple sources quote ...

CVE-2023-2363

The CVE-2023-2363 entry concerns SourceCodester Resort Reservation System 1.0. Affected component: view_room.php where manipulation of the id argument leads to an SQL injection. Documents consistently describe remote exploitation potential with publicly disclosed exploit details. Impact is descri...