CVE-2023-4111

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickup_id leads to cross site scripting. The attack may be launched remotely. VDB-235958 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79
• CWE-79

• http://packetstormsecurity.com/files/173927/PHPJabbers-Bus-Reservation-System-1.1-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.235958Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235958Third Party Advisory
• http://packetstormsecurity.com/files/173927/PHPJabbers-Bus-Reservation-System-1.1-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.235958Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235958Third Party Advisory

Published

Aug 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-41104libvmod-digest before 1.0.3, as used in Varnish Enterprise 6…6.5
• CVE-2023-41105An issue was discovered in Python 3.11 through 3.11.4. If a …7.5
• CVE-2023-41106An issue was discovered in Zimbra Collaboration (ZCS) before…7.5
• CVE-2023-41107TEF portal 2023-07-17 is vulnerable to a persistent cross si…5.4
• CVE-2023-41108TEF portal 2023-07-17 is vulnerable to authenticated remote …8.8
• CVE-2023-41109SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthentica…9.8
• CVE-2023-41111An issue was discovered in Samsung Mobile Processor, Wearabl…7.5
• CVE-2023-41112An issue was discovered in Samsung Mobile Processor, Wearabl…7.5
• CVE-2023-41113An issue was discovered in EnterpriseDB Postgres Advanced Se…4.3
• CVE-2023-41114An issue was discovered in EnterpriseDB Postgres Advanced Se…6.5
• CVE-2023-41115An issue was discovered in EnterpriseDB Postgres Advanced Se…6.5
• CVE-2023-41116An issue was discovered in EnterpriseDB Postgres Advanced Se…4.3