CVE-2023-1030

LOW

Online Boat Reservation System 1.0 - Cross-Site Scripting via POST Parameter Handler

Title source: llm

Description

A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry technical-description

https://vuldb.com/?id.221755

Permissions Required, Third Party Advisory, VDB Entry signature permissions-required

https://vuldb.com/?ctiid.221755

Permissions Required, VDB Entry third-party-advisory

https://vuldb.com/?submit.94112

Exploit, Third Party Advisory broken-link exploit

https://github.com/jidle123/bug_report/blob/main/vendors/winex01/Online%20Boat%20Reservation%20System/XSS-1.md#online-boat-reservation-system-v10-by-winex01-has-cross-site-scripting-reflected

Scores

CVSS v3 3.5

EPSS 0.0065

EPSS Percentile 46.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Details

CWE

CWE-79 CWE-94

Status published

Products (1)

online_boat_reservation_system_project/online_boat_reservation_system 1.0

Published Feb 24, 2023

Tracked Since Feb 18, 2026