7852 matches found
CVE-2023-51301
A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51300
PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting XSS vulnerabilities in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters...
CVE-2023-51302
PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51299
PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...
CVE-2023-51299
PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...
CVE-2023-51298
PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51297
A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51298
PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51297
A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51293
A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51296
PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting XSS in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters which allows attackers to execute arbitrary code...
CVE-2023-51296
PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting XSS in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters which allows attackers to execute arbitrary code...
CVE-2024-13508
The Booking Package plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the locale parameter in all versions up to, and including, 1.6.72 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2023-51297
CVE-2023-51297 describes a lack of rate limiting in the Email Settings feature of PHPJabbers Hotel Booking System v4.0, enabling an attacker to trigger a flood of emails to a legitimate user and potentially cause a Denial of Service. The connected sources consistently state the root cause as miss...
CVE-2023-51293
A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51299
PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection (XSS) via parameters name, plugin_sms_api_key, plugin_sms_country_code, and title. Root cause: inputs not properly sanitized, enabling injected HTML/script to be rendered. Public exploit material exists (PacketStorm), indicating...
CVE-2023-51296
Summary: CVE-2023-51296 affects PHPJabbers Event Booking Calendar v4.0, with a stored Cross-Site Scripting (XSS) flaw in the fields named in the description (name, plugin_sms_api_key, plugin_sms_country_code, title) that can lead to arbitrary code execution. The exploit details in the packetstorm...
CVE-2023-51300
PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting (XSS) via multiple input fields (name, plugin_sms_api_key, plugin_sms_country_code, title) as described in the CVE entry. The vulnerability arises in the web application where user-supplied content can be reflected in the ...
PT-2025-7286 · Phpjabbers · Phpjabbers Hotel Booking System
Name of the Vulnerable Software and Affected Versions: PHPJabbers Hotel Booking System version 4.0 Description: A lack of rate limiting in the "Login Section, Forgot Email" feature allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial o...