Filtered by vendor Phpjabbers
Subscribe
Total
139 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-48207 | 1 Phpjabbers | 1 Availability Booking Calendar | 2024-11-21 | N/A | 8.8 HIGH |
|
Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.
|
|||||
| CVE-2023-48172 | 1 Phpjabbers | 1 Shuttle Booking Software | 2024-11-21 | N/A | 5.4 MEDIUM |
|
A Cross Site Scripting (XSS) vulnerability in Shuttle Booking Software 2.0 allows a remote attacker to inject JavaScript via the name, description, title, or address parameter to index.php.
|
|||||
| CVE-2023-43274 | 1 Phpjabbers | 1 Php Shopping Cart | 2024-11-21 | N/A | 7.5 HIGH |
|
Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter.
|
|||||
| CVE-2023-43147 | 1 Phpjabbers | 1 Limo Booking Software | 2024-11-21 | N/A | 8.8 HIGH |
|
PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery (CSRF) to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI.
|
|||||
| CVE-2023-41539 | 1 Phpjabbers | 1 Business Directory Script | 2024-11-21 | N/A | 7.5 HIGH |
|
phpjabbers Business Directory Script 3.2 is vulnerable to SQL Injection via the column parameter.
|
|||||
| CVE-2023-41538 | 1 Phpjabbers | 1 Php Forum Script | 2024-11-21 | N/A | 6.1 MEDIUM |
|
phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting (XSS) via the keyword parameter.
|
|||||
| CVE-2023-40767 | 1 Phpjabbers | 1 Make An Offer Widget | 2024-11-21 | N/A | 9.8 CRITICAL |
|
User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
|
|||||
| CVE-2023-40766 | 1 Phpjabbers | 1 Ticket Support Script | 2024-11-21 | N/A | 9.8 CRITICAL |
|
User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
|
|||||
| CVE-2023-40765 | 1 Phpjabbers | 1 Event Booking Calendar | 2024-11-21 | N/A | 9.8 CRITICAL |
|
User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
|
|||||
| CVE-2023-40764 | 1 Phpjabbers | 1 Car Rental Script | 2024-11-21 | N/A | 9.8 CRITICAL |
|
User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
|
|||||
| CVE-2023-40763 | 1 Phpjabbers | 1 Taxi Booking Script | 2024-11-21 | N/A | 9.8 CRITICAL |
|
User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
|
|||||
| CVE-2023-40762 | 1 Phpjabbers | 1 Fundraising Script | 2024-11-21 | N/A | 9.8 CRITICAL |
|
User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
|
|||||
| CVE-2023-40761 | 1 Phpjabbers | 1 Yacht Listing Script | 2024-11-21 | N/A | 9.8 CRITICAL |
|
User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
|
|||||
| CVE-2023-40760 | 1 Phpjabbers | 1 Hotel Booking System | 2024-11-21 | N/A | 9.8 CRITICAL |
|
User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
|
|||||
| CVE-2023-40759 | 1 Phpjabbers | 1 Restaurant Booking Script | 2024-11-21 | N/A | 9.8 CRITICAL |
|
User enumeration is found in PHP Jabbers Restaurant Booking Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
|
|||||
| CVE-2023-40758 | 1 Phpjabbers | 1 Document Creator | 2024-11-21 | N/A | 9.8 CRITICAL |
|
User enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
|
|||||
| CVE-2023-40757 | 1 Phpjabbers | 1 Food Delivery Script | 2024-11-21 | N/A | 9.8 CRITICAL |
|
User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
|
|||||
| CVE-2023-40756 | 1 Phpjabbers | 1 Callback Widget | 2024-11-21 | N/A | 9.8 CRITICAL |
|
User enumeration is found in PHPJabbers Callback Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
|
|||||
| CVE-2023-40755 | 1 Phpjabbers | 1 Callback Widget | 2024-11-21 | N/A | 6.1 MEDIUM |
|
There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Callback Widget v1.0.
|
|||||
| CVE-2023-40754 | 1 Phpjabbers | 1 Car Rental Script | 2024-11-21 | N/A | 8.8 HIGH |
|
In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.
|
|||||
| CVE-2023-40753 | 1 Phpjabbers | 1 Ticket Support Script | 2024-11-21 | N/A | 5.4 MEDIUM |
|
There is a Cross Site Scripting (XSS) vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2.
|
|||||
| CVE-2023-40752 | 1 Phpjabbers | 1 Make An Offer Widget | 2024-11-21 | N/A | 6.1 MEDIUM |
|
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer Widget v1.0.
|
|||||
| CVE-2023-40751 | 1 Phpjabbers | 1 Fundraising Script | 2024-11-21 | N/A | 6.1 MEDIUM |
|
PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action" parameter of index.php.
|
|||||
| CVE-2023-40750 | 1 Phpjabbers | 1 Yacht Listing Script | 2024-11-21 | N/A | 6.1 MEDIUM |
|
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing Script v1.0.
|
|||||
| CVE-2023-40749 | 1 Phpjabbers | 1 Food Delivery Script | 2024-11-21 | N/A | 9.8 CRITICAL |
|
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php.
|
|||||
| CVE-2023-40748 | 1 Phpjabbers | 1 Food Delivery Script | 2024-11-21 | N/A | 9.8 CRITICAL |
|
PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php.
|
|||||
| CVE-2023-39776 | 1 Phpjabbers | 1 Ticket Support Script | 2024-11-21 | N/A | 9.8 CRITICAL |
|
A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file.
|
|||||
| CVE-2023-38830 | 1 Phpjabbers | 1 Yacht Listing Script | 2024-11-21 | N/A | 7.5 HIGH |
|
An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module.
|
|||||
| CVE-2023-36315 | 1 Phpjabbers | 1 Callback Widget | 2024-11-21 | N/A | 6.1 MEDIUM |
|
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0.
|
|||||
| CVE-2023-36314 | 1 Phpjabbers | 1 Callback Widget | 2024-11-21 | N/A | 6.1 MEDIUM |
|
There is a Cross Site Scripting (XSS) vulnerability in the value-text-o_sms_email_request_message parameters of index.php in PHPJabbers Callback Widget v1.0.
|
|||||
| CVE-2023-36313 | 1 Phpjabbers | 1 Document Creator | 2024-11-21 | N/A | 6.1 MEDIUM |
|
PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting (XSS) via all post parameters of "Export Requests" aside from "request_feed".
|
|||||
| CVE-2023-36312 | 1 Phpjabbers | 1 Callback Widget | 2024-11-21 | N/A | 5.4 MEDIUM |
|
There is a Cross Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php in PHPJabbers Callback Widget v1.0.
|
|||||
| CVE-2023-36311 | 1 Phpjabbers | 1 Document Creator | 2024-11-21 | N/A | 9.8 CRITICAL |
|
There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0.
|
|||||
| CVE-2023-36310 | 1 Phpjabbers | 1 Document Creator | 2024-11-21 | N/A | 6.1 MEDIUM |
|
There is a Cross Site Scripting (XSS) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0.
|
|||||
| CVE-2023-36309 | 1 Phpjabbers | 1 Document Creator | 2024-11-21 | N/A | 6.1 MEDIUM |
|
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0.
|
|||||
| CVE-2023-36141 | 1 Phpjabbers | 1 Cleaning Business Software | 2024-11-21 | N/A | 5.3 MEDIUM |
|
User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
|
|||||
| CVE-2023-36140 | 1 Phpjabbers | 1 Cleaning Business Software | 2024-11-21 | N/A | 9.8 CRITICAL |
|
In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts.
|
|||||
| CVE-2023-36139 | 1 Phpjabbers | 1 Cleaning Business Software | 2024-11-21 | N/A | 9.8 CRITICAL |
|
In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.
|
|||||
| CVE-2023-36138 | 1 Phpjabbers | 1 Cleaning Business Software | 2024-11-21 | N/A | 6.1 MEDIUM |
|
PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php.
|
|||||
| CVE-2023-36137 | 1 Phpjabbers | 1 Class Scheduling System | 2024-11-21 | N/A | 6.1 MEDIUM |
|
There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Scheduling System 1.0.
|
|||||