PT-2017-12706 · Phpjabbers · Phpjabbers File Sharing Script

Published 2017-12-30 · Updated 2018-01-11 · CVE-2017-12813

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPJabbers File Sharing Script version 1.0

Description The issue is related to stored XSS in the comments section, allowing potential exploitation.

Recommendations For PHPJabbers File Sharing Script version 1.0, consider validating and sanitizing user input in the comments section to prevent XSS attacks. As a temporary workaround, restrict access to the comments section until a proper fix is applied.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-12813

Affected Products

Phpjabbers File Sharing Script

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-12813 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12813 · Vendor Advisory
• https://pastebin.com/raw/LTZFaL5x · Note