CVE-2023-39776
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
CVE-2023-39776 describes a vulnerability in PHPJabbers Ticket Support Script v3.2 that allows attackers to execute arbitrary code by uploading a crafted file.
Risk Assessment
This vulnerability can lead to remote code execution, posing a serious threat to the security of the system and user data.
Recommendation
It is recommended to update the script to the latest version and implement appropriate security measures for uploaded files.
Other vulnerabilities in PHPJabbers Ticket Support Script v3.2
See all- CVE-2023-40766Critical
User enumeration is found in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
- CVE-2023-40753Medium
There is a Cross Site Scripting (XSS) vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2.
Original NVD description (English source)
A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file.