A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-236234 is the identifier assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/Yesec/Resort-Reservation-System/blob/main/local%20file%20inclusion/vuln.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.236234 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.236234 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
10 Aug 2023, 18:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://vuldb.com/?ctiid.236234 - Permissions Required, Third Party Advisory | |
| References | (MISC) https://github.com/Yesec/Resort-Reservation-System/blob/main/local%20file%20inclusion/vuln.md - Exploit, Third Party Advisory | |
| References | (MISC) https://vuldb.com/?id.236234 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Resort Reservation System Project
Resort Reservation System Project resort Reservation System |
|
| CPE | cpe:2.3:a:resort_reservation_system_project:resort_reservation_system:1.0:*:*:*:*:*:*:* |
06 Aug 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-06 23:15
Updated : 2024-04-11 01:22
NVD link : CVE-2023-4191
Mitre link : CVE-2023-4191
CVE.ORG link : CVE-2023-4191
JSON object : View
Products Affected
resort_reservation_system_project
- resort_reservation_system
CWE
CWE-73
External Control of File Name or Path