Vulnerability · Published Aug 3, 2023 · Assigned by VulDB
CVE-2023-4114PHP Jabbers Night Club Booking Software index.php cross site scripting
Medium 4.3
In plain English
A medium-severity cross-site scripting in Night Club Booking Software from PHP Jabbers. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 8.3% (higher than 95% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
A vulnerability was found in PHP Jabbers Night Club Booking Software 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235961 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PHP Jabbers | Night Club Booking Software | 1.0 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
References
- https://vuldb.com/?id.235961 vdb-entry, technical-description
- https://vuldb.com/?ctiid.235961 signature, permissions-required
- http://packetstormsecurity.com/files/173932/PHPJabbers-Night-Club-Booking-1.0-Cross-Site-Scripting.html related