CVE-2023-4111: PHP Jabbers Bus Reservation System index.php cross site scripting
First published: Thu Aug 03 2023(Updated: )
A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickup_id leads to cross site scripting. The attack may be launched remotely. VDB-235958 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Phpjabbers Bus Reservation System | =1.1 | |
| =1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-4111?
The severity of CVE-2023-4111 is medium.
What is the affected software of CVE-2023-4111?
The affected software of CVE-2023-4111 is PHP Jabbers Bus Reservation System 1.1.
What is the CWE of CVE-2023-4111?
The CWE of CVE-2023-4111 is CWE-79 (Cross-site Scripting).
How can I fix CVE-2023-4111?
To fix CVE-2023-4111, you should apply the latest patch or upgrade to a newer version of PHP Jabbers Bus Reservation System.
Are there any references for CVE-2023-4111?
Yes, you can find references for CVE-2023-4111 at the following links: [link1](https://vuldb.com/?id.235958), [link2](https://vuldb.com/?ctiid.235958), [link3](http://packetstormsecurity.com/files/173945/PHPJabbers-Bus-Reservation-System-1.1-SQL-Injection.html).
- collector/nvd-latest
- collector/nvd-index
- agent/author
- agent/type
- agent/references
- agent/weakness
- agent/description
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/title
- agent/first-publish-date
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/phpjabbers
- canonical/phpjabbers bus reservation system
- version/phpjabbers bus reservation system/1.1