Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-4090 State: PUBLISHED Published: 2023-10-04T11:02:48.227Z Last Updated: 2024-09-05T18:12:02.261Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Acilia Products: Widestand CMS Problem Types: CWE-79 Description: Cross-site Scripting (XSS) reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tags directly using the content of the queried URL, which would allow an attacker to inject HTML/Javascript code into the response. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-vulnerability-widestand
hment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-vulnerability-widestand-cms-acilia
CVE ID: CVE-2023-4091 State: PUBLISHED Published: 2023-11-03T07:56:35.611Z Last Updated: 2025-11-20T18:27:17.162Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Storage 3 Problem Types: CWE-276 Description: A vulnerability was discovered in Samba, where
nterprise Linux 7, Red Hat Storage 3 Problem Types: CWE-276 Description: A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contai
s checks, relying solely on Samba's permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:6209 - https://access.redhat.com/errata/RHSA-2023:6744 - https://access.redhat.com/errata/RHSA-2023:7371 - https://access.redhat.com/errata/RHSA-2023:7408 - https://access.redhat.com/errata/RHSA-2023:7464 - https://access.redhat.com/errata/RHSA-2023:7467 - https://access.redhat.com/security/cve/CVE-2023-4091 - https://bugzilla.redhat.com/show_bug.cgi?id=2241882 - https://bugzilla.samba.org/show_bug.cgi?id=15439 - https://www.samba.org/samba/security/CVE-2023-4091.html
CVE ID: CVE-2023-4092 State: PUBLISHED Published: 2023-09-19T12:57:10.594Z Last Updated: 2024-09-25T14:17:34.806Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Fujitsu Products: Arconte Áurea Problem Types: CWE-89 Description: SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to read sensitive data from the database, modify data (insert/update/delete), perform database administration operations and, in some cases, execute commands on the operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-c
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea
CVE ID: CVE-2023-4093 State: PUBLISHED Published: 2023-09-19T13:00:27.476Z Last Updated: 2024-09-06T14:12:35.915Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Fujitsu Products: Arconte Áurea Problem Types: CWE-79 Description: Reflected and persistent XSS vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to inject malicious JavaScript code, compromise the victim's browser and take control of it, redirect the user to malicious domains or access information being viewed by the legitimate user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
the legitimate user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea
CVE ID: CVE-2023-4094 State: PUBLISHED Published: 2023-09-19T13:15:00.556Z Last Updated: 2024-09-25T15:31:16.724Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Fujitsu Products: Arconte Áurea Problem Types: CWE-1390 Description: ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the login form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cer
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea
CVE ID: CVE-2023-4095 State: PUBLISHED Published: 2023-09-19T13:22:30.888Z Last Updated: 2024-09-25T15:28:11.045Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Fujitsu Products: Arconte Áurea Problem Types: CWE-204 Description: User enumeration vulnerability in Arconte Áurea 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to obtain a list of registered users in the application, obtaining the necessary information to perform more complex attacks on the platform. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-
ner: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea
CVE ID: CVE-2023-4096 State: PUBLISHED Published: 2023-09-19T13:24:18.900Z Last Updated: 2024-09-25T15:25:13.198Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Fujitsu Products: Arconte Áurea Problem Types: CWE VIEW: Deprecated Entries Description: Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed PIN number in order to change the password of a legitimate user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu
CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea
CVE ID: CVE-2023-4097 State: PUBLISHED Published: 2023-10-03T10:46:06.241Z Last Updated: 2024-09-19T20:02:40.437Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IDM Sistemas QSige Products: QSige Problem Types: CWE-434 Description: The file upload functionality is not implemented correctly and allows uploading of any type of file. As a prerequisite, it is necessary for the attacker to log into the application with a valid username. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-idm-sistemas-qsige
CVE ID: CVE-2023-4098 State: PUBLISHED Published: 2023-10-03T11:03:00.369Z Last Updated: 2024-09-20T14:14:37.982Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: QSige de IDM Sistemas Products: QSige Problem Types: CWE-89 Description: It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure. As a prerequisite, it is necessary to log into the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-idm-sistemas-qsige
CVE ID: CVE-2023-4099 State: PUBLISHED Published: 2023-10-03T11:06:48.726Z Last Updated: 2024-09-06T14:11:28.247Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: QSige de IDM Sistemas Products: QSige Problem Types: CWE-639 Description: The QSige Monitor application does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-idm-sistemas-qsige
CVE ID: CVE-2023-4100 State: PUBLISHED Published: 2023-10-03T11:22:28.091Z Last Updated: 2024-09-06T14:11:02.084Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: IDM Sistemas QSige Products: QSige Problem Types: CWE-79 Description: Allows an attacker to perform XSS attacks stored on certain resources. Exploiting this vulnerability can lead to a DoS condition, among other actions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-idm-sistemas-qsige
CVE ID: CVE-2023-4101 State: PUBLISHED Published: 2023-10-03T11:26:49.190Z Last Updated: 2024-09-23T17:06:19.046Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IDM Sistemas QSige Products: QSige Problem Types: CWE-639 Description: The QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-idm-sistemas-qsige
CVE ID: CVE-2023-4102 State: PUBLISHED Published: 2023-10-03T11:29:46.537Z Last Updated: 2024-09-19T20:24:32.988Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IDM Sistemas QSige Products: QSige Problem Types: CWE-89 Description: QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-idm-sistemas-qsige
CVE ID: CVE-2023-4103 State: PUBLISHED Published: 2023-10-03T11:30:45.879Z Last Updated: 2024-09-19T20:22:31.428Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IDM Sistemas QSige Products: QSige Problem Types: CWE-89 Description: QSige statistics are affected by a remote SQLi vulnerability. It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure. As a prerequisite, it is necessary to log into the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilit
ntainer: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-idm-sistemas-qsige
CVE ID: CVE-2023-4104 State: PUBLISHED Published: 2023-09-11T08:02:53.854Z Last Updated: 2025-07-03T13:57:22.751Z Vendors: Mozilla Products: Mozilla VPN 2.16.1 Problem Types: Local user authentication flaws in Mozilla VPN client for Linux in v2.16.0 and below. Description: An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitrary VPN setups. *This bug only affects Mozilla VPN on Linux. Other operating systems are unaffected.* This vulnerability affects Mozilla VPN 2.16.1 < (Linux). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1831318 - https://github.com/mozilla-mobile/mozilla-vpn-client/pull/7055 - https://github.com/mozilla-mobile/mozilla-vpn-client/pull/7110 - https://github.com/mozilla-mobile/mozilla-vpn-client/pull/7151 - https://www.mozilla.org/security/advisories/mfsa2023-39/ - https://www.openwall.com/lists/oss-security/2023/08/03/1
CVE ID: CVE-2023-4105 State: PUBLISHED Published: 2023-08-11T06:11:57.438Z Last Updated: 2024-10-01T20:31:10.494Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-862 Description: Mattermost fails to delete the attachments when deleting a message in a thread allowing a simple user to still be able to access and download the attachment of a deleted message Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-4106 State: PUBLISHED Published: 2023-08-11T06:12:11.064Z Last Updated: 2024-10-01T20:21:07.128Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-862 Description: Mattermost fails to check if the requesting user is a guest before performing different actions to public playbooks, resulting a guest being able to view, join, edit, export and archive public playbooks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-4107 State: PUBLISHED Published: 2023-08-11T06:12:21.977Z Last Updated: 2024-10-11T16:52:17.516Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, first name and last name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-4108 State: PUBLISHED Published: 2023-08-11T06:12:33.792Z Last Updated: 2024-10-03T20:27:59.225Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-532 Description: Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-4109 State: PUBLISHED Published: 2023-08-30T14:22:02.447Z Last Updated: 2025-04-23T16:18:53.384Z Vendors: Unknown Products: Ninja Forms Contact Form Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The Ninja Forms WordPress Ninja Forms Contact Form WordPress plugin before 3.6.26 was affected by a HTML Injection security vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/558e06ab-704b-4bb1-ba7f-b5f6bbbd68d9
CVE ID: CVE-2023-4110 State: PUBLISHED Published: 2023-08-03T02:31:03.086Z Last Updated: 2024-10-10T20:24:43.497Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHP Jabbers Products: Availability Booking Calendar Problem Types: CWE-79 Description: A vulnerability has been found in PHP Jabbers Availability Booking Calendar 5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument session_id leads to cross site scripting. The attack can be launched remotely. The identifier VDB-235957 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not r
VDB-235957 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235957 - https://vuldb.com/?ctiid.235957 - http://packetstormsecurity.com/files/173926/PHPJabbers-Availability-Booking-Calendar-5.0-Cross-Site-Scripting.html
CVE ID: CVE-2023-4111 State: PUBLISHED Published: 2023-08-03T04:00:05.206Z Last Updated: 2024-08-02T07:17:11.951Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: PHP Jabbers Products: Bus Reservation System Problem Types: CWE-79 Description: A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickup_id leads to cross site scripting. The attack may be launched remotely. VDB-235958 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Ad
ned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235958 - https://vuldb.com/?ctiid.235958 - http://packetstormsecurity.com/files/173927/PHPJabbers-Bus-Reservation-System-1.1-Cross-Site-Scripting.html
CVE ID: CVE-2023-4112 State: PUBLISHED Published: 2023-08-03T04:31:04.074Z Last Updated: 2024-08-02T07:17:11.901Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: PHP Jabbers Products: Shuttle Booking Software Problem Types: CWE-79 Description: A vulnerability was found in PHP Jabbers Shuttle Booking Software 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-235959. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE
E: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235959 - https://vuldb.com/?ctiid.235959 - http://packetstormsecurity.com/files/173930/PHPJabbers-Shuttle-Booking-Software-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2023-4113 State: PUBLISHED Published: 2023-08-03T05:00:06.871Z Last Updated: 2024-08-02T07:17:11.797Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: PHP Jabbers Products: Service Booking Script Problem Types: CWE-79 Description: A vulnerability was found in PHP Jabbers Service Booking Script 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-235960. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes:
0. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235960 - https://vuldb.com/?ctiid.235960 - http://packetstormsecurity.com/files/173931/PHPJabbers-Service-Booking-Script-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2023-4114 State: PUBLISHED Published: 2023-08-03T05:31:03.558Z Last Updated: 2024-08-02T07:17:11.868Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: PHP Jabbers Products: Night Club Booking Software Problem Types: CWE-79 Description: A vulnerability was found in PHP Jabbers Night Club Booking Software 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235961 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additi
to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235961 - https://vuldb.com/?ctiid.235961 - http://packetstormsecurity.com/files/173932/PHPJabbers-Night-Club-Booking-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2023-4115 State: PUBLISHED Published: 2023-08-03T06:00:05.943Z Last Updated: 2024-11-21T15:14:09.898Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: PHP Jabbers Products: Cleaning Business Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. VDB-235962 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE P
: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235962 - https://vuldb.com/?ctiid.235962 - http://packetstormsecurity.com/files/173936/PHPJabbers-Cleaning-Business-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2023-4116 State: PUBLISHED Published: 2023-08-03T07:00:06.181Z Last Updated: 2024-10-11T19:10:45.471Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: PHP Jabbers Products: Taxi Booking Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in PHP Jabbers Taxi Booking 2.0. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-235963. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: -
NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235963 - https://vuldb.com/?ctiid.235963 - http://packetstormsecurity.com/files/173937/PHPJabbers-Taxi-Booking-2.0-Cross-Site-Scripting.html
CVE ID: CVE-2023-4117 State: PUBLISHED Published: 2023-08-03T07:31:03.270Z Last Updated: 2024-08-02T07:17:11.897Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: PHP Jabbers Products: Rental Property Booking Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in PHP Jabbers Rental Property Booking 2.0. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235964. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additi
ability is VDB-235964. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235964 - https://vuldb.com/?ctiid.235964 - http://packetstormsecurity.com/files/173939/PHPJabbers-Rental-Property-Booking-2.0-Cross-Site-Scripting.html