CVE-2024-5385

A vulnerability, which was classified as problematic, has been found in oretnom23 Online Car Wash Booking System 1.0. This issue affects some unknown processing of the file /admin/?page=user/list. The manipulation of the argument First Name/Last Name with the input <script>confirm (document.cookie)</script> leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-266303.

• CWE-79

• https://vuldb.com/?ctiid.266303Permissions Required
• https://vuldb.com/?id.266303Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.344504Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.266303Permissions Required
• https://vuldb.com/?id.266303Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.344504Third Party Advisory, VDB Entry

Published

May 27, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-53844E.D.D.I (Enhanced Dialog Driven Interface) is a middleware t…6.3
• CVE-2024-53845ESPTouch is a connection protocol for internet of things dev…6.6
• CVE-2024-53846OTP is a set of Erlang libraries, which consists of the Erla…5.5
• CVE-2024-53847The Trix rich text editor, prior to versions 2.1.9 and 1.3.3…5.1
• CVE-2024-53848check-jsonschema is a CLI and set of pre-commit hooks for js…7.1
• CVE-2024-53849editorconfig-core-c is theEditorConfig core library writte…4.8
• CVE-2024-53850The Addressing GLPI plugin enables you to create IP reports …8.2
• CVE-2024-53851Discourse is an open source platform for community discussio…6.5
• CVE-2024-53855Centurion ERP (Enterprise Rescource Planning) is a simple ap…4.3
• CVE-2024-53856rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14…7.5
• CVE-2024-53857rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14…7.5
• CVE-2024-53858The gh cli is GitHub’s official command line tool. A securit…6.5