CVE-2023-5585

SourceCodester Online Motorcycle Rental System Bike List cross site scripting

Low2.4EPSS 0.36%

Published: 14 Oct 2023
Updated: 16 Sept 2024
Reserved: 14 Oct 2023
Assigned by: VulDB

Description

A vulnerability was found in SourceCodester Online Motorcycle Rental System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/?page=bike of the component Bike List. The manipulation of the argument Model with the input "><script>confirm (document.cookie)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-242170 is the identifier assigned to this vulnerability.

Scores

CVSS scores of CVE-2023-5585, by who scored it
Scored by	CVSS	Score	Vector
VulDBCNA (assigner)	3.1	Low2.4	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
VulDBCNA (assigner)	3.0	Low2.4	CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
VulDBCNA (assigner)	2.0	Low3.3	AV:N/AC:L/Au:M/C:N/I:P/A:N
NVDNVD · Modified	3.1	Medium6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS (exploitation in 30 days): 0.36% · top 70% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: poc · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.4.

Weakness

CWE-79 Cross Site Scripting (opens in a new tab)All about CWE-79 and its CVEs

Affected products

SourceCodester · Online Motorcycle Rental System
- affected 1.0

References (2)

https://vuldb.com/?id.242170 (opens in a new tab)vdb-entrytechnical-descriptionx_transferred
https://vuldb.com/?ctiid.242170 (opens in a new tab)signaturepermissions-requiredx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2023-5585](https://trackcve.app/badge/CVE-2023-5585.svg)](https://trackcve.app/cve/CVE-2023-5585)

Record last updated 16 Sept 2024, 20:02 UTC.