Lucene search

VulDBCVE-2023-3543

HistoryJul 07, 2023 - 5:15 p.m.

CVE-2023-3543

2023-07-0717:15:10

CWE-79

VulDB

web.nvd.nist.gov

gz scripts

availability booking calendar

php

vulnerability

cross-site scripting

remote attack

nvd

cve-2023-3543

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

33.5%

JSON

A vulnerability was found in GZ Scripts Availability Booking Calendar PHP 1.8. It has been classified as problematic. This affects an unknown part of the file load.php of the component HTTP POST Request Handler. The manipulation of the argument cid/first_name/second_name/address_1/country leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-233295. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected configurations

Nvd

Vulners

Node

gzscriptsavailability_booking_calendar_phpMatch1.8

VendorProductVersionCPE
gzscriptsavailability_booking_calendar_php1.8cpe:2.3:a:gzscripts:availability_booking_calendar_php:1.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gzscripts	availability_booking_calendar_php	1.8	cpe:2.3:a:gzscripts:availability_booking_calendar_php:1.8:::::::*

CNA Affected

[
  {
    "vendor": "GZ Scripts",
    "product": "Availability Booking Calendar PHP",
    "versions": [
      {
        "version": "1.8",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  }
]

References

vuldb.com/?ctiid.233295

vuldb.com/?id.233295

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

33.5%

JSON

Related for CVE-2023-3543