CVE-2023-2099

A vulnerability classified as problematic has been found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226107.

• CWE-79
• CWE-79

• https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%208.pdfExploit
• https://vuldb.com/?ctiid.226107Permissions Required, Third Party Advisory
• https://vuldb.com/?id.226107Permissions Required, Third Party Advisory
• https://github.com/E1CHO/cve_hub/blob/main/Vehicle%20Service%20Management%20System/Vehicle%20Service%20Management%20System%20-%20vuln%208.pdfExploit
• https://vuldb.com/?ctiid.226107Permissions Required, Third Party Advisory
• https://vuldb.com/?id.226107Permissions Required, Third Party Advisory

Published

Apr 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20984In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possibl…4.4
• CVE-2023-20985In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, ther…7.8
• CVE-2023-20986In btm_ble_clear_resolving_list_completecomplete of btm_ble_…4.4
• CVE-2023-20987In btm_read_link_quality_complete of btm_acl.cc, there is a …4.5
• CVE-2023-20988In btm_read_rssi_complete of btm_acl.cc, there is a possible…4.5
• CVE-2023-20989In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, ther…4.4
• CVE-2023-20990In btm_ble_rand_enc_complete of btm_ble.cc, there is a possi…4.4
• CVE-2023-20991In btm_ble_process_periodic_adv_sync_lost_evt of ble_scanner…4.4
• CVE-2023-20992In on_iso_link_quality_read of btm_iso_impl.h, there is a po…4.5
• CVE-2023-20993In multiple functions of SnoozeHelper.java, there is a possi…7.8
• CVE-2023-20994In _ufdt_output_property_to_fdt of ufdt_convert.c, there is …6.7
• CVE-2023-20995In captureImage of CustomizedSensor.cpp, there is a possible…7.8