CVE-2023-43147

CVE-2023-43147 厂商：PHPJabbers 厂商主页：https://www.phpjabbers.com/ 软件链接：https://www.phpjabbers.com/limo-booking-software 版本：1.0 测试环境：Windows 10 Pro 影响：添加具有管理员权限的攻击者用户 CVE： limo-booking-software 中的跨站请求伪造漏洞允许远程攻击者执行添加用户操作并赋予管理员权限 POC 1 - 创建包含以下代码的文件并保存为 HTML。如果要保存新的请求以制造 CSRF，请确保将 roleid=0 改为 1 roleid=1...

CVE-2023-43147

PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery CSRF to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers=pjActionCreate URI...

EUVD-2023-47566

Malicious code in bioql PyPI...

CVE-2023-43147

PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery CSRF to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI...

CVE-2023-43147

PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery CSRF to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI...

Cross site request forgery (csrf)

PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery CSRF to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI...

PT-2023-28717 · Phpjabbers · Phpjabbers Limo Booking

Name of the Vulnerable Software and Affected Versions: PHPJabbers Limo Booking Software version 1.0 Description: The issue allows for Cross Site Request Forgery CSRF to add an admin user via the Add Users Function. This can be achieved through the...

Limo Booking Software Cross-Site Request Forgery Vulnerability

PHPJabbers Limo Booking Software is a limo booking software from PHPJabbers. A security vulnerability exists in PHPJabbers Limo Booking Software version 1.0, which stems from the presence of a cross-site request forgery CSRF vulnerability...