Lucene search
MitreCVE-2023-43147HistoryOct 12, 2023 - 4:15 p.m.
CVE-2023-43147
2023-10-1216:15:12
CWE-352
mitre
web.nvd.nist.gov
21
cve-2023-43147
phpjabbers
limo booking
software
csrf
security
vulnerability
nvd
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
28.9%
PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery (CSRF) to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI.
Affected configurations
Node
phpjabberslimo_booking_softwareMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpjabbers | limo_booking_software | 1.0 | cpe:2.3:a:phpjabbers:limo_booking_software:1.0:*:*:*:*:*:*:* |
References
Related
vulnrichment
vulnrichment
CVE-2023-43147
2023-10-12 00:00:00
prion
prion
Cross site request forgery (csrf)
2023-10-12 16:15:00
cvelist
cvelist
CVE-2023-43147
2023-10-12 00:00:00
nvd
nvd
CVE-2023-43147
2023-10-12 16:15:12
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
28.9%
Related for CVE-2023-43147