CVE-2023-38830
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module.
Risk Assessment
Organizations may be exposed to theft of customers' financial data, which can lead to serious legal and reputational consequences.
Recommendation
It is recommended to update the script to the latest version and implement additional security measures to protect customer data.
Other vulnerabilities in PHPJabbers Yacht Listing Script v1.0
See all- CVE-2023-40761Critical
User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
- CVE-2023-40750Medium
There is a Cross Site Scripting (XSS) vulnerability in the 'action' parameter of index.php in PHPJabbers Yacht Listing Script v1.0.
Original NVD description (English source)
An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module.