CVE-2025-2377: SourceCodester Vehicle Management System confirmbooking.php cross site scripting
A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /confirmbooking.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting product names.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2377?
CVE-2025-2377 is classified as a problematic cross-site scripting vulnerability.
How do I fix CVE-2025-2377?
To fix CVE-2025-2377, ensure proper input validation and sanitization on the /confirmbooking.php file.
What software is affected by CVE-2025-2377?
CVE-2025-2377 affects the SourceCodester Vehicle Management System version 1.0.
What type of vulnerability is CVE-2025-2377?
CVE-2025-2377 is a cross-site scripting (XSS) vulnerability that can be exploited through manipulated arguments.
How can attackers exploit CVE-2025-2377?
Attackers can exploit CVE-2025-2377 by manipulating the 'id' argument in the /confirmbooking.php file.