Lucene search

VulDBCVE-2023-6075

HistoryNov 10, 2023 - 3:15 p.m.

CVE-2023-6075

2023-11-1015:15:09

CWE-79

VulDB

web.nvd.nist.gov

vulnerability

phpgurukul

restaurant table booking system

cross-site scripting

remote attack

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.1%

JSON

A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file index.php of the component Reservation Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-244944.

Affected configurations

Nvd

Vulners

Node

phpgurukulrestaurant_table_booking_systemMatch1.0

VendorProductVersionCPE
phpgurukulrestaurant_table_booking_system1.0cpe:2.3:a:phpgurukul:restaurant_table_booking_system:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpgurukul	restaurant_table_booking_system	1.0	cpe:2.3:a:phpgurukul:restaurant_table_booking_system:1.0:::::::*

CNA Affected

[
  {
    "vendor": "PHPGurukul",
    "product": "Restaurant Table Booking System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "modules": [
      "Reservation Request Handler"
    ]
  }
]

References

vuldb.com/?ctiid.244944

vuldb.com/?id.244944

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.1%

JSON

Related for CVE-2023-6075