CVE-2023-43147

Name of the Vulnerable Software and Affected Versions PHPJabbers Limo Booking Software version 1.0

Description The issue allows for Cross Site Request Forgery (CSRF) to add an admin user via the Add Users Function. This can be achieved through the "index.php?controller=pjAdminUsers&action=pjActionCreate" URI.

Recommendations For PHPJabbers Limo Booking Software version 1.0, consider disabling the Add Users Function until a patch is available to prevent exploitation. Restrict access to the "index.php?controller=pjAdminUsers&action=pjActionCreate" URI to minimize the risk of CSRF attacks.