CVE-2023-36310

There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36314

There is a Cross Site Scripting XSS vulnerability in the value-text-osmsemailrequestmessage parameters of index.php in PHPJabbers Callback Widget v1.0...

CVE-2023-36312

There is a Cross Site Scripting XSS vulnerability in the value-enum-obfincludetimezone parameter of index.php in PHPJabbers Callback Widget v1.0...

CVE-2023-36310

There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36309

CVE-2023-36309 affects PHPJabbers Document Creator v1.0, with a Cross-Site Scripting (XSS) flaw in the action parameter of index.php. The issue is documented across multiple sources (NVD, Red Hat, CVE lists) with the vulnerability described as XSS in the action parameter, but concrete exploit det...

CVE-2023-36314: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting XSS vulnerability in the value-text-osmsemailrequestmessage parameters of index.php in PHPJabbers Callback Widget v1.0...

PT-2023-25524 · Phpjabbers · Phpjabbers Document Creator

Name of the Vulnerable Software and Affected Versions: PHPJabbers Document Creator version 1.0 Description: There is a Cross Site Scripting XSS issue in the action parameter of "index.php" in PHPJabbers Document Creator. This allows for potential malicious script execution. Recommendations: For...

PT-2023-25530 · Phpjabbers · Phpjabbers Callback Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Callback Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the value-text-o sms email request message parameters of index.php. This allows for potential malicious script execution. Recommendations: For...

CVE-2023-36311

CVE-2023-36311: SQL injection in the PHPJabbers Document Creator v1.0, triggered by the column parameter of index.php. Affects PHPJabbers Document Creator; root cause is unsafely handled SQL in the column param. Documented references indicate high risk (NVD/Red Hat entries) with no explicit explo...

CVE-2023-36309

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36312

There is a Cross Site Scripting XSS vulnerability in the value-enum-obfincludetimezone parameter of index.php in PHPJabbers Callback Widget v1.0...

CVE-2023-36315

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0...

PT-2023-25528 · Phpjabbers · Phpjabbers Callback Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Callback Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the value-enum-o bf include timezone parameter of index.php. This allows for potential malicious script execution. Recommendations: For PHPJabber...

CVE-2023-36312: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting XSS vulnerability in the value-enum-obfincludetimezone parameter of index.php in PHPJabbers Callback Widget v1.0...

CVE-2023-36310: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36311: Improper Neutralization of Special Elements used in an SQL Command

There is a SQL injection SQLi vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36315: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0...

CVE-2023-36309: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36314

CVE-2023-36314 describes a Cross Site Scripting (XSS) vulnerability in PHPJabbers Callback Widget v1.0, specifically in the value-text-o_sms_email_request_message parameter of index.php. Connected documents confirm the affected product and vulnerable parameter. No exploitation details are provide...

CVE-2023-36306: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code via the asktheoracle.php, details.php, index.php, search.php, export.php, reports.php, and statistics.php components...