CVE-2023-4115
published 2023-08-03CVE-2023-4115: A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. Affected is an unknown function of the file /index.php. The…
PriorityP343medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
5.18%
91.4th percentile
A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. VDB-235962 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| php_jabbers | cleaning_business | — | — |
| phpjabbers | cleaning_business_software | — | — |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET EXPLOIT Suspected Exim External Auth Overflow (CVE-2023-4115) set
suricata·2023-10-03·CVSS 4.3
CVE-2023-4115 [MEDIUM] ET EXPLOIT Suspected Exim External Auth Overflow (CVE-2023-4115) set
ET EXPLOIT Suspected Exim External Auth Overflow (CVE-2023-4115) set
Rule: alert smtp $HOME_NET any -> any any (msg:"ET EXPLOIT Suspected Exim External Auth Overflow (CVE-2023-4115) set"; flow:established; flowbits:set,ET.eximsmtp; flowbits:noalert; content:"ESMTP Exim|20|"; fast_pattern; reference:url,www.zerodayinitiative.com/advisories/ZDI-23-1469/; reference:url,labs.watchtowr.com/exim-0days-90s-vulns-in-90s-software/; reference:cve,2023-4115; classtype:attempted-admin; sid:2048389; rev:1; metadata:attack_target SMTP_Server, created_at 2023_10_03, cve CVE_2023_4115, deployment Perimeter, deployment SSLDecrypt, performance_impact Significant, confidence Low, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2023_10_03, reviewed_at 2023_10_03; target:sr
Exploit-DB
PHPJabbers Cleaning Business 1.0 - Reflected XSS
exploitdb·2023-08-04·CVSS 4.3
CVE-2023-4115 [MEDIUM] PHPJabbers Cleaning Business 1.0 - Reflected XSS
PHPJabbers Cleaning Business 1.0 - Reflected XSS
---
# Exploit Title: PHPJabbers Cleaning Business 1.0 - Reflected XSS
# Exploit Author: CraCkEr
# Date: 21/07/2023
# Vendor: PHPJabbers
# Vendor Homepage: https://www.phpjabbers.com/
# Software Link: https://www.phpjabbers.com/cleaning-business-software/
# Version: 1.0
# Tested on: Windows 10 Pro
# Impact: Manipulate the content of the site
# CVE: CVE-2023-4115
## Greetings
The_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL , MoizSid09, indoushka
CryptoJob (Twitter) twitter.com/0x0CryptoJob
## Description
The attacker can send to victim a link containing a malicious URL in an email or instant message
can perform a wide variety of actions, such as stealing the victim's session token or login credentials
Path: /index.php
GE
Nuclei
PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting
nuclei·CVSS 6.1
CVE-2023-4115 [MEDIUM] PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting
PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting
The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials.
Template:
id: CVE-2023-4115
info:
name: PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting
author: r3Y3r53
severity: medium
description: |
The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials.
impact: |
Unauthenticated attackers can inject malicious JavaScript through the index parameter to steal session tokens and credentials of cleaning business booking system administrators and c
No writeups or analysis indexed.
http://packetstormsecurity.com/files/173936/PHPJabbers-Cleaning-Business-1.0-Cross-Site-Scripting.htmlhttps://vuldb.com/?ctiid.235962https://vuldb.com/?id.235962http://packetstormsecurity.com/files/173936/PHPJabbers-Cleaning-Business-1.0-Cross-Site-Scripting.htmlhttps://vuldb.com/?ctiid.235962https://vuldb.com/?id.235962
2023-08-03
Published