PHPJabbers Event Ticketing System version 1.0 suffers from cross site scripting and html injection vulnerabilities.

    # Exploit Title: PHPJabbers Event Ticketing System v1.0 - Multiple HTML Injection# Date: 19/12/2023# Exploit Author: BugsBD Limited# Discover by: Rahad Chowdhury# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/event-ticketing-system/#sectionDemo# Version: v1.0# Tested on: Windows 10, Windows 11, Linux# CVE-2023-51303Descriptions:PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTMLInjection. HTML injection, also known as HTML code injection orcross-site scripting (XSS), is a web security vulnerability thatallows an attacker to inject malicious code into a web page that isthen viewed by other users. This can lead to various attacks, such asstealing sensitive information, session hijacking, defacement ofwebsites, or delivering malware to users.Parameters: "lid, name, plugin_sms_api_key, plugin_sms_country_code,title, plugin_sms_api_key, title".Steps to Reproduce:1. Login your panel.2. Go to System Menu then click SMS Settings.3. Then use any HTML Tag in "SMS API Key", "Default Country Code"input field and Save.4. You will see HTML code working here.## Reproduce:[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51303)# Exploit Title: PHPJabbers Event Ticketing System v1.0 - Multiple Stored XSS# Date: 19/12/2023# Exploit Author: BugsBD Limited# Discover by: Rahad Chowdhury# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/event-ticketing-system/#sectionDemo# Version: v1.0# Tested on: Windows 10, Windows 11, Linux# CVE-2023-51306Descriptions:PHPJabbers Event Ticketing System v1.0 is vulnerable to MultipleStored Cross-Site Scripting. Multiple Stored XSS is a type of securityvulnerability that occurs when an application or website allows anattacker to inject malicious scripts into the content that ispermanently stored on the server.Steps to Reproduce:1. Login your panel.2. Vulnerable parameters are "name, title".3. Go to System Users then click Add User.4. Then use any XSS Payload in "Name" input field and Save.5. You will see xss popup.## Reproduce:[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51306)# Exploit Title: PHPJabbers Event Ticketing System v1.0 - Reflected XSS# Date: 19/12/2023# Exploit Author: BugsBD Limited# Discover by: Rahad Chowdhury# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/event-ticketing-system/#sectionDemo# Version: v1.0# Tested on: Windows 10, Windows 11, Linux# CVE-2023-51337Descriptions:Reflected cross-site scripting (XSS) vulnerability exists in indexpage "lid" parameter of PHPJabbers Event Ticketing System v1.0 thatallows attackers to execute arbitrary web scripts or HTML via acrafted payload injected into the Website login page parameter.Steps to Reproduce:1. Visit main url2. Now use XSS Payload in "lid" parameter.3. You will see xss popup.## Reproduce:[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51337)

PHPJabbers Event Ticketing System 1.0 Cross Site Scripting / HTML Injection

PHPJabbers Cinema Booking System version 1.0 suffers from a missing rate limiting vulnerability.

    # Exploit Title: PHPJabbers Cinema Booking System v1.0 - No Rate Limit# Date: 19/12/2023# Exploit Author: BugsBD Limited# Discover by: Rahad Chowdhury# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/cinema-booking-system/#sectionDemo# Version: v1.0# Tested on: Windows 10, Windows 11, Linux# CVE-2023-51334Descriptions:A lack of rate limiting in the "Login Section, Forgot Email" featureof PHPJabbers Cinema Booking System v1.0 allows attackers to send anexcessive amount of reset requests for a legitimate user, leading to apossible Denial of Service (DoS) via a large amount of generatede-mail messages.Steps to Reproduce:1. Visit this URLhttps://demo.phpjabbers.com/1704804809_816/index.php?controller=pjAdmin&action=pjActionIndex2. Now use the account mail that is already registered on this website.3. Capture request data using burp suite and send it to Intruder Tab4. Configure Intruder and Start Attack5. Check your email.## Reproduce:[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51334)

PHPJabbers Cinema Booking System 1.0 Missing Rate Limiting

PHPJabbers Cinema Booking System version 1.0 suffers from a CSV injection vulnerability.

    # Exploit Title: PHPJabbers Cinema Booking System v1.0 - CSV Injection# Date: 19/12/2023# Exploit Author: BugsBD Limited# Discover by: Rahad Chowdhury# Vendor Homepage: https://www.phpjabbers.com/# Software Link:https://www.phpjabbers.com/meeting-room-booking-system/#sectionDemo# Version: v1.0# Tested on: Windows 10, Windows 11# CVE-2023-51333Descriptions:PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV injectionvulnerability which allows an attacker to execute remote code. Thevulnerability exists due to insufficient input validation on theUnique ID field in the Reservations list that is used to construct aCSV file.Steps to Reproduce:1. Login your panel.2. Go to Options Menu then click Language then click Labels section.3. Now use CSV Injection Payload in any field and go to Import/Export.4. Now click export and open your system.## Reproduce:[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51333)

PHPJabbers Cinema Booking System 1.0 CSV Injection

PHPJabbers Meeting Room Booking System version 1.0 suffers from a missing rate limiting vulnerability.

    # Exploit Title: PHPJabbers Meeting Room Booking System v1.0 - No Rate Limit# Date: 19/12/2023# Exploit Author: BugsBD Limited# Discover by: Rahad Chowdhury# Vendor Homepage: https://www.phpjabbers.com/# Software Link:https://www.phpjabbers.com/meeting-room-booking-system/#sectionDemo# Version: v1.0# Tested on: Windows 10, Windows 11, Linux# CVE-2023-51332Descriptions:A lack of rate limiting in the "Forgot Email" feature of PHPJabbersMeeting Room Booking System v1.0 allows attackers to send an excessiveamount of reset requests for a legitimate user, leading to a possibleDenial of Service (DoS) via a large amount of generated e-mailmessages.Steps to Reproduce:1. Visit this URLhttps://demo.phpjabbers.com/1704805602_793/index.php?controller=pjAdmin&action=pjActionLogin2. Now use the account mail that is already registered on this website.3. Capture request data using burp suite and send it to Intruder Tab4. Configure Intruder and Start Attack5. Check your email.## Reproduce:[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51332)

PHPJabbers Meeting Room Booking System 1.0 Missing Rate Limiting

PHPJabbers Cleaning Business Software version 1.0 suffers from a CSV injection vulnerability.

    # Exploit Title: PHPJabbers Cleaning Business Software v1.0 - CSV Injection# Date: 19/12/2023# Exploit Author: BugsBD Limited# Discover by: Rahad Chowdhury# Vendor Homepage: https://www.phpjabbers.com/# Software Link:https://www.phpjabbers.com/cleaning-business-software/#sectionDemo# Version: v1.0# Tested on: Windows 10, Windows 11# CVE-2023-51331Descriptions:PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSVinjection vulnerability which allows an attacker to execute remotecode. The vulnerability exists due to insufficient input validation onthe Unique ID field in the Reservations list that is used to constructa CSV file.Steps to Reproduce:1. Login your panel.2. Go to Options Menu then click Language then click Labels section.3. Now use CSV Injection Payload in any field and go to Import/Export.4. Now click export and open your system.## Reproduce:[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51331)

PHPJabbers Cleaning Business Software 1.0 CSV Injection

PHPJabbers Cinema Booking System version 1.0 suffers from reflective and persistent cross site scripting vulnerabilities.

    # Exploit Title: PHPJabbers Cinema Booking System v1.0 - Reflected Cross-Site Scripting# Date: 19/12/2023# Exploit Author: BugsBD Limited# Discover by: Rahad Chowdhury# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/cinema-booking-system/#sectionDemo# Version: v1.0# Tested on: Windows 10, Windows 11, Linux# CVE-2023-51330Descriptions:Reflected cross-site scripting (XSS) vulnerability exists inReservations menu, Schedule section and "date" parameter of PHPJabbersCinema Booking System v1.0 that allows attackers to execute arbitraryweb scripts or HTML via a crafted payload injected into the Websitelogin page parameter.Steps to Reproduce:1. Login your panel.2. Go to Now Showing menu then click Print.3. Now use XSS Payload in "date" parameter.4. You will see xss popup.## Reproduce:[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51330)# Exploit Title: PHPJabbers Cinema Booking System v1.0 - Multiple Stored XSS# Date: 19/12/2023# Exploit Author: BugsBD Limited# Discover by: Rahad Chowdhury# Vendor Homepage: https://www.phpjabbers.com/# Software Link: https://www.phpjabbers.com/cinema-booking-system/#sectionDemo# Version: v1.0# Tested on: Windows 10, Windows 11, Linux# CVE-2023-51335Descriptions:PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple StoredCross-Site Scripting. Multiple Stored XSS is a type of securityvulnerability that occurs when an application or website allows anattacker to inject malicious scripts into the content that ispermanently stored on the server.Steps to Reproduce:1. Login your panel.2. Vulnerable parameters are "title, name".3. Go to System Users Menu then click add user.4. Then use any XSS Payload in "Name" input field and Save.5. You will see xss popup.## Reproduce:[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51335)

PHPJabbers Cinema Booking System 1.0 Cross Site Scripting

PHPJabbers Cleaning Business Software version 1.0 suffers from multiple persistent cross site scripting vulnerabilities.

    # Exploit Title: PHPJabbers Cleaning Business Software v1.0 - MultipleStored XSS# Date: 19/12/2023# Exploit Author: BugsBD Limited# Discover by: Rahad Chowdhury# Vendor Homepage: https://www.phpjabbers.com/# Software Link:https://www.phpjabbers.com/cleaning-business-software/#sectionDemo# Version: v1.0# Tested on: Windows 10, Windows 11, Linux# CVE-2023-51328Descriptions:PHPJabbers Cleaning Business Software v1.0 is vulnerable to MultipleStored Cross-Site Scripting. Multiple Stored XSS is a type of securityvulnerability that occurs when an application or website allows anattacker to inject malicious scripts into the content that ispermanently stored on the server.Steps to Reproduce:1. Login your panel.2. Vulnerable parameters are "c_name, name".3. Go to System Users Menu then click add user.4. Then use any XSS Payload in "Name" input field and Save.5. You will see xss popup.## Reproduce:[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51328)

PHPJabbers Cleaning Business Software 1.0 Cross Site Scripting

PHPJabbers Cleaning Business Software version 1.0 suffers from multiple missing rate limiting vulnerabilities.

    # Exploit Title: PHPJabbers Cleaning Business Software v1.0 - No Rate Limit# Date: 19/12/2023# Exploit Author: BugsBD Limited# Discover by: Rahad Chowdhury# Vendor Homepage: https://www.phpjabbers.com/# Software Link:https://www.phpjabbers.com/cleaning-business-software/#sectionDemo# Version: v1.0# Tested on: Windows 10, Windows 11, Linux# CVE-2023-51326Descriptions:A lack of rate limiting in the "Forgot Email" feature of PHPJabbersCleaning Business Software v1.0 allows attackers to send an excessiveamount of reset requests for a legitimate user, leading to a possibleDenial of Service (DoS) via a large amount of generated e-mailmessages.Steps to Reproduce:1. Visit this URLhttps://demo.phpjabbers.com/1704803403_514/index.php?controller=pjAdmin&action=pjActionLogin2. Now use the account mail that is already registered on this website.3. Capture request data using burp suite and send it to Intruder Tab4. Configure Intruder and Start Attack5. Check your email.## Reproduce:[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51326)# Exploit Title: PHPJabbers Cleaning Business Software v1.0 - Missing Rate Limit# Date: 19/12/2023# Exploit Author: BugsBD Limited# Discover by: Rahad Chowdhury# Vendor Homepage: https://www.phpjabbers.com/# Software Link:https://www.phpjabbers.com/cleaning-business-software/#sectionDemo# Version: v1.0# Tested on: Windows 10, Windows 11, Linux# CVE-2023-51327Descriptions:A lack of rate limiting in the "Forgot Email" feature of PHPJabbersCleaning Business Software v1.0 allows attackers to send an excessiveamount of reset requests for a legitimate user, leading to a possibleDenial of Service (DoS) via a large amount of generated e-mailmessages.Steps to Reproduce:1. Visit this URLhttps://demo.phpjabbers.com/{*}/index.php?controller=pjAdmin&action=pjActionLogin2. Now use the account mail that is already registered on this website.3. Capture request data using burp suite and send it to Intruder Tab4. Configure Intruder and Start Attack5. Check your email.## Reproduce:[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51327)

PHPJabbers Cleaning Business Software 1.0 Missing Rate Limiting

PHPJabbers Shared Asset Booking System version 1.0 suffers from multiple persistent cross site scripting vulnerabilities.

    # Exploit Title: PHPJabbers Shared Asset Booking System v1.0 -Multiple Stored XSS# Date: 19/12/2023# Exploit Author: BugsBD Limited# Discover by: Rahad Chowdhury# Vendor Homepage: https://www.phpjabbers.com/# Software Link:https://www.phpjabbers.com/shared-asset-booking-system/#sectionDemo# Version: v1.0# Tested on: Windows 10, Windows 11, Linux# CVE-2023-51325Descriptions:PHPJabbers Shared Asset Booking System v1.0 is vulnerable to MultipleStored Cross-Site Scripting. Multiple Stored XSS is a type of securityvulnerability that occurs when an application or website allows anattacker to inject malicious scripts into the content that ispermanently stored on the server.Steps to Reproduce:1. Login your panel.2. Vulnerable parameters are "title, name".3. Go to System Users Menu then add user.4. Then use any XSS Payload in "Name" input field and Save.5. You will see xss popup.## Reproduce:[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51325)

PHPJabbers Shared Asset Booking System 1.0 Cross Site Scripting

By Waqas
Mandiant had its X account (formerly Twitter) hacked on January 3rd, 2024.
This is a post from HackRead.com Read the original post: Mandiant: X Account Hacked in Brute-Force Attack Linked to ClinkSink Campaign

Mandiant’s investigation unveiled that the attack was part of a larger operation known as “ClinkSink,” which employed a “Drainer-as-a-Service” (DaaS) model to steal Solana cryptocurrency.

Mandiant, a renowned cybersecurity firm and Google subsidiary found itself facing the very threat it combats on January 3rd, 2024. In an ironic twist, Mandiant’s own X account (formerly Twitter) was compromised through a brute-force attack, highlighting the ever-present vulnerability of even the most well-defended systems.

Hacked X account of Mandiant (Hackread.com)

****The Breach: Phishing for Profits****

The attacker, leveraging a brute-force method, cracked Mandiant’s X account password and gained access. With control in hand, the perpetrator swiftly transformed the account into a malicious tool, spewing links to a cleverly disguised phishing webpage.

This page mimicked a legitimate X login portal, luring unsuspecting users to enter their credentials. Upon entering their information, users were unknowingly redirected to a hidden page that would siphon their cryptocurrency funds if signed in – a digital heist unfolding right under the noses of cybersecurity experts.

> _“On January 3, 2024, Mandiant’s X social media account was taken over and subsequently used to distribute links to a cryptocurrency drainer phishing page. Working with X, we were able to regain control of the account and, based on our investigation over the following days, we found no evidence of malicious activity on, or compromise of, any Mandiant or Google Cloud systems that led to the compromise of this account.”_
> 
> Mandiant

****ClinkSink: The Drain Behind the Curtain****

In a commendable display of transparency, Mandiant publicly acknowledged the breach and shared its findings in a detailed blog post published on Wednesday 11, 2024. The cybersecurity giant revealed that a “weak password” was the likely culprit, emphasizing the importance of password best practices. Additionally, they confirmed that only their X account was compromised and no other systems were breached.

Mandiant’s investigation also revealed the attack was part of a larger operation dubbed “ClinkSink.” This campaign utilized a “Drainer-as-a-Service” (DaaS) model, where pre-built phishing kits and tools are readily available for purchase by cyber criminals. ClinkSink specifically targeted owners of Solana cryptocurrency, a popular blockchain platform.

According to the company, so far, malicious threat actors have stolen hundreds of thousands of dollars worth of Solana cryptocurrency assets in the recent ClinkSink drainer campaigns.

A Telegram channel part of the ClinkSink attack campaign (Screenshot: Mandiant)

****A Defender Breached: Lessons Learned****

While Mandiant eventually regained control of its X account and the immediate threat was neutralized, the incident served as a harsh reality check and points out several crucial cybersecurity lessons:

*   **No one is invincible:** Even the most secure systems are vulnerable to determined attackers.
*   **Password hygiene is paramount:** Strong, unique passwords and robust two-factor authentication are essential defence mechanisms.
*   **Vigilance is key:** Constant monitoring and quick response are crucial in mitigating damage from cyberattacks.

Nevertheless, this is not the first time that a cybersecurity firm fell prey to hackers or was targeted by malicious threat actors. In March 2023, a Swiss technology and cybersecurity company, Acronis, experienced a data breach, with over 21 GB of files and folders being leaked by a hacker known as Kernelware.

In February 2023, the Singapore-based Group-IB cybersecurity firm revealed that it has been constantly targeted by malicious threat actors based in the People’s Republic of China. In February 2021, the French cybersecurity company Stormshield suffered a data breach in which its source code and customer data were stolen by unknown hackers.

****_RELATED ARTICLES_****

Tag

#git