CVE-2023-43147: CSRF
First published: Thu Oct 12 2023(Updated: )
PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery (CSRF) to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHPJabbers Limo Booking Software | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for PHPJabbers Limo Booking Software 1.0?
The vulnerability ID for PHPJabbers Limo Booking Software 1.0 is CVE-2023-43147.
What is the severity of CVE-2023-43147?
The severity of CVE-2023-43147 is high with a CVSS score of 8.8.
What is the affected software of CVE-2023-43147?
The affected software of CVE-2023-43147 is PHPJabbers Limo Booking Software 1.0.
What is the CWE of CVE-2023-43147?
The CWE of CVE-2023-43147 is CWE-352.
How can I fix the CSRF vulnerability in PHPJabbers Limo Booking Software 1.0?
To fix the CSRF vulnerability in PHPJabbers Limo Booking Software 1.0, it is recommended to apply the latest patch or update provided by the vendor.
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/phpjabbers
- canonical/phpjabbers limo booking software
- version/phpjabbers limo booking software/1.0