PT-2025-7301 · Phpjabbers · Phpjabbers Bus Reservation System

Published 2025-02-20 · Updated 2025-02-20 · CVE-2023-51318

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPJabbers Bus Reservation System version 1.1

Description The issue concerns Multiple Stored Cross-Site Scripting (XSS) in the title and name parameters. This allows for malicious scripts to be stored and executed when a user accesses the affected page.

Recommendations For PHPJabbers Bus Reservation System version 1.1, consider validating and sanitizing user input for the title and name parameters to prevent XSS attacks. As a temporary workaround, restrict access to the parameters title and name until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-51318

Affected Products

Phpjabbers Bus Reservation System

References · 6

• 🔥 https://packetstorm.news/files/id/176499 · Exploit
• https://osv.dev/vulnerability/CVE-2023-51318 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-51318 · Security Note
• https://phpjabbers.com/bus-reservation-system/#sectionDemo · Note
• https://twitter.com/CVEnew/status/1892598432562561170 · Twitter Post
• http://packetstormsecurity.com/files/176499/PHPJabbers-Bus-Reservation-System-1.1-Cross-Site-Scripting.html · Note