PT-2025-7302 · Phpjabbers · Phpjabbers Bus Reservation System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Bus Reservation System version 1.1 Description: The issue allows an attacker to execute remote code due to insufficient input validation in the Languages section Labels any parameters field in System Options, which is used to...

PT-2025-7299

Name of the Vulnerable Software and Affected Versions PHPJabbers Bus Reservation System version 1.1 Description A lack of rate limiting in the 'Forgot Password' feature allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a...

CVE-2023-51319

The PHPJabbers Bus Reservation System v1.1 is susceptible to a CSV Injection vulnerability. The root cause is insufficient input validation on the Labels any parameters field within the Languages section of the System Options , which is used to construct CSV files. This flaw can allow an attacker...

PT-2025-7301 · Phpjabbers · Phpjabbers Bus Reservation System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Bus Reservation System version 1.1 Description: The issue concerns Multiple Stored Cross-Site Scripting XSS in the title and name parameters. This allows for malicious scripts to be stored and executed when a user accesses the...

CVE-2023-51316

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51318

PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) . The issue is caused by improper neutralization of input in the "title" and "name" parameters, which allows malicious scripts to be stored and executed when users access the affected pages. As a te...

CVE-2023-51316

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51316: Uncontrolled Resource Consumption

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51319

PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

Kashipara Bus Ticket Reservation System SQL Injection Vulnerability

Kashipara Bus Ticket Reservation System is a bus reservation system from Kashipara. A SQL injection vulnerability exists in Kashipara Bus Ticket Reservation System v1.0, which stems from the application's lack of validation of externally-entered SQL statements, and can be exploited by a remote...

Bus Reservation System Security Vulnerability

Bus Reservation System is PHPJabbers open source a bus reservation system . Bus Reservation System 1.1 version has a security vulnerability , the vulnerability stems from the existence of a lost rate limit vulnerability...

PHPJabbers Bus Reservation System 1.1 Cross Site Scripting

Exploit Title: PHPJabbers Bus Reservation System v1.1 - Multiple Stored XSS Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/bus-reservation-system/sectionDemo Version: v1.1 Tested o...

PHPJabbers Bus Reservation System 1.1 CSV Injection

Exploit Title: PHPJabbers Bus Reservation System v1.1 - CSV Injection Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/bus-reservation-system/sectionDemo Version: v1.1 Tested on:...

Bus Reservation System Security Vulnerability

Bus Reservation System is PHPJabbers open source a bus reservation system . Bus Reservation System 1.1 version has a security vulnerability , the vulnerability stems from the existence of CSV injection vulnerability...

Bus Reservation System Security Vulnerability

Bus Reservation System is PHPJabbers open source a bus reservation system . Bus Reservation System 1.1 version has a security vulnerability , the vulnerability stems from the existence of multiple stored cross-site scripting vulnerabilities...

CVE-2023-4111

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickupid leads to cross site scripting. The attack may be launched remotely...

CVE-2023-4111

PHP Jabbers Bus Reservation System 1.1 has a cross-site scripting vulnerability in /index.php via the pickup_id (and related index parameter) that can be exploited remotely. Multiple connected sources identify the issue as RXSS/REFLECTED XSS in the index.php endpoint, affecting the file’s handlin...

CVE-2023-4111: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickupid leads to cross site scripting. The attack may be launched remotely...

PT-2023-27793 · Phpjabbers · Phpjabbers Bus Reservation System

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Bus Reservation System version 1.1 Description: A vulnerability was found in the PHP Jabbers Bus Reservation System, affecting some unknown functionality of the file /index.php. The manipulation of the pickup id argument in the...

PHPJabbers Bus Reservation System 1.1 SQL Injection

Exploit Title: PHPJabbers Bus Reservation System 1.1 - SQL Injection Exploit Author: CraCkEr Date: 20/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/bus-reservation-system/ Tested on: Windows 10 Pro Impact: Database Access CVE:...