PHPJabbers Time Slots Booking Calendar Security Vulnerability

PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers. A security vulnerability exists in PHPJabbers Time Slots Booking Calendar version v3.3, which originated from a vulnerability that allows an attacker to determine if a user is valid via user enumeration, leading to a brut...

CVE-2023-33561

CVE-2023-33561 affects PHP Jabbers Time Slots Booking Calendar, version 3.3. The root cause is improper input validation of the password parameter, which leads to insecure passwords. Documented references consistently describe this vulnerable password handling, with no public details on a vendor ...

PHPJabbers Time Slots Booking Calendar Authorization Issues Vulnerability

PHPJabbers Time Slots Booking Calendar is a booking system by PHPJabbers. A security vulnerability exists in PHPJabbers Time Slots Booking Calendar version v3.3, which stems from a lack of validation when changing an email address or password on the profile page, allowing a remote attacker to tak...

CVE-2023-33562

CVE-2023-33562 concerns PHP Jabbers Time Slots Booking Calendar v3.3. The issue is a user-enumeration flaw occurring during the password-recovery flow, where messages differ between valid and invalid usernames, enabling an attacker to determine valid users and potentially perform a brute-force lo...

CVE-2023-33560

There is a Cross Site Scripting XSS vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...

CVE-2023-33563

In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...

CVE-2023-33564

There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...

PT-2023-24386 · Phpjabbers · Php Jabbers Time Slots Booking Calendar

Name of the Vulnerable Software and Affected Versions: PHPJabbers Time Slots Booking Calendar version 3.3 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It affects the cid parameter of the preview.php file. This vulnerability can potentially be exploited to execute...

PHPJabbers Time Slots Booking Calendar Cross Site Scripting Vulnerability

PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers. A cross-site scripting vulnerability exists in PHPJabbers Time Slots Booking Calendar v3.3, which stems from a cross-site scripting XSS vulnerability contained in the component...

CVE-2023-33563

CVE-2023-33563 affects PHP Jabbers Time Slots Booking Calendar 3.3. The vulnerability is a lack of verification when changing an email address and/or password on the Profile Page, which can enable remote attackers to take over accounts. The issue is documented across multiple feeds as an authoriz...

CVE-2023-33560

There is a Cross Site Scripting XSS vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...

PHPJabbers Time Slots Booking Calendar Cross Site Scripting Vulnerability

PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers. A cross-site scripting vulnerability exists in PHPJabbers Time Slots Booking Calendar v3.3, which stems from a cross-site scripting XSS vulnerability in the cid parameter of Preview.php...

Availability Booking Calendar PHP Cross Site Scripting Vulnerability

Availability Booking Calendar PHP is GZ Scripts open source an availability booking calendar system . Availability Booking Calendar PHP v1.0 version of a cross-site scripting vulnerability , the vulnerability stems from the file index.php parameter promocode on the user-supplied data lack of...

WordPress plugin WooCommerce Pre-Orders 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

Availability Booking Calendar v1.0 - Multiple Cross-site scripting Vulnerability

Exploit Title: Availability Booking Calendar v1.0 - Multiple Cross-site scripting XSS Exploit Author: Andrey Stoykov Tested on: Ubuntu 20.04 Blog: http://msecureltd.blogspot.com XSS 1: Steps to Reproduce: 1. Browse to Bookings 2. Select All Bookings 3. Edit booking and select Promo Code 4. Enter...

CVE-2023-3970

A vulnerability, which was classified as problematic, was found in GZ Scripts Availability Booking Calendar PHP 1.0. This affects an unknown part of the file /index.php?controller=GzUser&action=edit&id=1 of the component Image Handler. The manipulation of the argument img leads to cross site...

CVE-2023-3970

A vulnerability, which was classified as problematic, was found in GZ Scripts Availability Booking Calendar PHP 1.0. This affects an unknown part of the file /index.php?controller=GzUser&action=edit&id=1 of the component Image Handler. The manipulation of the argument img leads to cross site...

CVE-2023-3969

A vulnerability, which was classified as problematic, has been found in GZ Scripts Availability Booking Calendar PHP 1.0. Affected by this issue is some unknown functionality of the file index.php of the component HTTP POST Request Handler. The manipulation of the argument promocode leads to cros...

CVE-2023-3969

A vulnerability, which was classified as problematic, has been found in GZ Scripts Availability Booking Calendar PHP 1.0. Affected by this issue is some unknown functionality of the file index.php of the component HTTP POST Request Handler. The manipulation of the argument promocode leads to cros...

Cross site scripting

A vulnerability, which was classified as problematic, was found in GZ Scripts Availability Booking Calendar PHP 1.0. This affects an unknown part of the file /index.php?controller=GzUser&action=edit&id=1 of the component Image Handler. The manipulation of the argument img leads to cross site...