CVE-2023-4117

Description

A vulnerability, which was classified as problematic, has been found in PHP Jabbers Rental Property Booking 2.0. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235964. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Risk Information

Base Score

6.1

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.595

Associated Vulnerability

Vulnerability	OS Platform
libtiff Security Update (ALAS-2024-2655) libtiff-tools-4.0.3-35.amzn2.0.22.x86_64.rpm	Linux
libtiff Security Update (ALAS-2024-2655) libtiff-static-4.0.3-35.amzn2.0.22.x86_64.rpm	Linux
libtiff Security Update (ALAS-2024-2655) libtiff-devel-4.0.3-35.amzn2.0.22.x86_64.rpm	Linux
libtiff Security Update (ALAS-2024-2655) libtiff-4.0.3-35.amzn2.0.22.x86_64.rpm	Linux
libtiff Security Update (ALAS-2024-2655) libtiff-4.0.3-35.amzn2.0.22.i686.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234