leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-266303.", "datePublished": "2024-05-27T00:00:04Z", "dateModified": "2024-08-15T15:03:17Z", "keywords": "CVE-2024-5385, vulnerability, CVE, security, Online Car Wash Booking System, oretnom23", "about": { "@type": "SoftwareApplication", "name": "Online Car Wash Booking System", "applicationCategory": "SecurityApplication", "operatingSystem": "All" } }
CVE-2024-5385 MEDIUM

CVE-2024-5385: oretnom23 Online Car Wash Booking System cross site scripting

Vendor Oretnom23
Product Online Car Wash Booking System
Weakness CWE-79 · XSS
Published May 27, 2024
Last update August 15, 2024
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability, which was classified as problematic, has been found in oretnom23 Online Car Wash Booking System 1.0. This issue affects some unknown processing of the file /admin/?page=user/list. The manipulation of the argument First Name/Last Name with the input <script>confirm (document.cookie)</script> leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-266303.

Key dates

02Disclosure timeline

May 27, 2024 CVE published
August 15, 2024 Record updated