PHPJabbers Cleaning Business Software 1.0 Cross Site Scripting

2024.01.11
Risk: Low
Local: No
Remote: Yes
CWE: CWE-79

# Exploit Title: PHPJabbers Cleaning Business Software v1.0 - Multiple Stored XSS # Date: 19/12/2023 # Exploit Author: BugsBD Limited # Discover by: Rahad Chowdhury # Vendor Homepage: https://www.phpjabbers.com/ # Software Link: https://www.phpjabbers.com/cleaning-business-software/#sectionDemo # Version: v1.0 # Tested on: Windows 10, Windows 11, Linux # CVE-2023-51328 Descriptions: PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting. Multiple Stored XSS is a type of security vulnerability that occurs when an application or website allows an attacker to inject malicious scripts into the content that is permanently stored on the server. Steps to Reproduce: 1. Login your panel. 2. Vulnerable parameters are "c_name, name". 3. Go to System Users Menu then click add user. 4. Then use any XSS Payload in "Name" input field and Save. 5. You will see xss popup. ## Reproduce: [href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51328)


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top