PT-2023-27618 · Phpjabbers · Phpjabbers Ticket Support Script

CVE-2023-40753 · Publicado 2023-08-28 · Atualizado 2023-08-29

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPJabbers Ticket Support Script version 3.2

Description There is a Cross Site Scripting (XSS) issue in the message parameter of "index.php" in PHPJabbers Ticket Support Script. This allows for potential malicious script execution.

Recommendations For PHPJabbers Ticket Support Script version 3.2, consider disabling the message parameter in "index.php" until a patch is available to prevent exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-40753

Produtos afetados

Phpjabbers Ticket Support Script

Referências · 8

• 🔥 https://medium.com/@mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f · Exploit
• https://phpjabbers.com/ticket-support-script · Nota
• https://t.me/cibsecurity/69287 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-40753 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-40753 · Nota de Segurança
• https://twitter.com/CVEnew/status/1696150329765576805 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1696175350227619935 · Publicação no Twitter
• https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f · Nota