CVE-2025-2377: SourceCodester Vehicle Management System confirmbooking.php cross site scripting
First published: Mon Mar 17 2025(Updated: )
A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /confirmbooking.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting product names.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| itsourcecode Vehicle Management System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.299876
- https://vuldb.com/?ctiid.299876
- https://vuldb.com/?submit.515797
- https://github.com/Keyand/Multi-Restaurant-Table-Reservation-System-Search/blob/main/Vehicle%20Management%20System%20confirmbooking.php%20has%20Cross-site%20Scripting%20(XSS).pdf
- https://www.sourcecodester.com/
Frequently Asked Questions
What is the severity of CVE-2025-2377?
CVE-2025-2377 is classified as a problematic cross-site scripting vulnerability.
How do I fix CVE-2025-2377?
To fix CVE-2025-2377, ensure proper input validation and sanitization on the /confirmbooking.php file.
What software is affected by CVE-2025-2377?
CVE-2025-2377 affects the SourceCodester Vehicle Management System version 1.0.
What type of vulnerability is CVE-2025-2377?
CVE-2025-2377 is a cross-site scripting (XSS) vulnerability that can be exploited through manipulated arguments.
How can attackers exploit CVE-2025-2377?
Attackers can exploit CVE-2025-2377 by manipulating the 'id' argument in the /confirmbooking.php file.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/source
- agent/author
- agent/tags
- agent/event
- vendor/sourcecodester
- canonical/itsourcecode vehicle management system