PT-2023-20771 · Zijper · Zbbs+2

B4Zb0Z · Publicado 2023-03-30 · Atualizado 2025-02-18 · CVE-2023-26692

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ZCBS Zijper Collectie Beheer Systeem (ZCBS) version 4.14k Zijper Publication Management System (ZPBS) version 4.14k Zijper Image Bank Management System (ZBBS) version 4.14k

Description The issue is related to Cross Site Scripting (XSS), which is a type of security vulnerability that can be exploited by attackers to inject malicious scripts into websites. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For ZCBS Zijper Collectie Beheer Systeem (ZCBS) version 4.14k, update to a version that fixes the Cross Site Scripting (XSS) issue. For Zijper Publication Management System (ZPBS) version 4.14k, update to a version that fixes the Cross Site Scripting (XSS) issue. For Zijper Image Bank Management System (ZBBS) version 4.14k, update to a version that fixes the Cross Site Scripting (XSS) issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-26692

Produtos afetados

Zbbs

Zcbs

Zpbs

Referências · 6

• 🔥 https://github.com/bigzooooz/CVE-2023-26692#readme · Exploit
• 🔥 https://exploit-db.com/exploits/51347 · Exploit
• https://t.me/cibsecurity/61217 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-26692 · Nota de Segurança
• http://packetstormsecurity.com/files/171787/ZCBS-ZBBS-ZPBS-4.14k-Cross-Site-Scripting.html · Nota
• https://t.me/cvenotify/111652 · Publicação no Telegram