CVE-2023-3309

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file ?page=rooms of the component Manage Room Page. The manipulation of the argument Cottage Number leads to cross site scripting. The attack can be launched remotely. The identifier VDB-231805 was assigned to this vulnerability.

• CWE-79

• https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3309Exploit
• https://vuldb.com/?ctiid.231805Third Party Advisory
• https://vuldb.com/?id.231805Third Party Advisory
• https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3309Exploit
• https://vuldb.com/?ctiid.231805Third Party Advisory
• https://vuldb.com/?id.231805Third Party Advisory
• https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3309Exploit

Published

Jun 18, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-33084Transient DOS while processing IE fragments from server duri…7.5
• CVE-2023-33085Memory corruption in wearables while processing data from AO…7.8
• CVE-2023-33086Transient DOS while processing multiple IKEV2 Informational …7.5
• CVE-2023-33087Memory corruption in Core while processing RX intent request…7.8
• CVE-2023-33088Memory corruption when processing cmd parameters while parsi…7.8
• CVE-2023-33089Transient DOS when processing a NULL buffer while parsing WL…7.5
• CVE-2023-33090Transient DOS while processing channel information for speak…5.5
• CVE-2023-33092Memory corruption while processing pin reply in Bluetooth, w…7.8
• CVE-2023-33094Memory corruption while running VK synchronization with KASA…7.8
• CVE-2023-33095Transient DOS while processing multiple payload container ty…7.5
• CVE-2023-33096Transient DOS while processing DL NAS Transport message, as …7.5
• CVE-2023-33097Transient DOS in WLAN Firmware while processing a FTMR frame…7.5