MEDIUM🇵🇱 Wersja polska

CVE-2023-4111

CVSS 4.3v3.1pub. 2023-08-03upd. 2024-11-21

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickup_id leads to cross site scripting. The attack may be launched remotely. VDB-235958 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

  • Phpjabbers Bus Reservation System

    APP
    Phpjabbers
    1.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2023-53877CRITICAL9.3PL ✓ten sam produkt

SQL injection w PHPJabbers Bus Reservation System 1.1 (parametr pickup_id)

CVE-2023-51316HIGH7.5ten sam produkt

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows atta...

CVE-2023-51319HIGH8.8ten sam produkt

PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker t...

CVE-2023-51318MEDIUM5.4ten sam produkt

PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "tit...

CVE-2024-57428CRITICAL9.3PL ✓ten sam vendor

Stored XSS w PHPJabbers Cinema Booking System v2.0