PT-2023-20771 · Zijper · Zbbs+2

B4Zb0Z · Published 2023-03-30 · Updated 2025-02-18 · CVE-2023-26692

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ZCBS Zijper Collectie Beheer Systeem (ZCBS) version 4.14k Zijper Publication Management System (ZPBS) version 4.14k Zijper Image Bank Management System (ZBBS) version 4.14k

Description The issue is related to Cross Site Scripting (XSS), which is a type of security vulnerability that can be exploited by attackers to inject malicious scripts into websites. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For ZCBS Zijper Collectie Beheer Systeem (ZCBS) version 4.14k, update to a version that fixes the Cross Site Scripting (XSS) issue. For Zijper Publication Management System (ZPBS) version 4.14k, update to a version that fixes the Cross Site Scripting (XSS) issue. For Zijper Image Bank Management System (ZBBS) version 4.14k, update to a version that fixes the Cross Site Scripting (XSS) issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-26692

Affected Products

Zbbs

Zcbs

Zpbs

References · 6

• 🔥 https://github.com/bigzooooz/CVE-2023-26692#readme · Exploit
• 🔥 https://exploit-db.com/exploits/51347 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-26692 · Security Note
• https://t.me/cibsecurity/61217 · Telegram Post
• http://packetstormsecurity.com/files/171787/ZCBS-ZBBS-ZPBS-4.14k-Cross-Site-Scripting.html · Note
• https://t.me/cvenotify/111652 · Telegram Post