CVE-2023-51310

A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51309

A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51309

The PHPJabbers Car Park Booking System v3.0 is vulnerable to a Denial of Service (DoS) attack due to a lack of rate limiting in the 'Email Settings' feature. An attacker can trigger the system to send an excessive amount of emails for a legitimate user, potentially exhausting resources. As a temp...

CVE-2023-51311

PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51310: Allocation of Resources Without Limits or Throttling

A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51308: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51309: Allocation of Resources Without Limits or Throttling

A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

PT-2025-7293 · Phpjabbers · Phpjabbers Car Park Booking System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Car Park Booking System version 3.0 Description: A lack of rate limiting in the 'Forgot Password' and 'Email Settings' features allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Deni...

CVE-2023-51308

PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection and stored cross-site scripting (XSS) within the name, plugin_sms_api_key, plugin_sms_country_code, and title parameters. The root cause involves improper neutralization of script-related HTML tags in a web page (CWE...

CVE-2023-51310

PHPJabbers Car Park Booking System v3.0 is vulnerable to a Denial of Service (DoS) attack due to a lack of rate limiting in the 'Forgot Password' and 'Email Settings' features. Attackers can exploit this to trigger an excessive volume of emails for a legitimate user, potentially exhausting resour...

CVE-2023-51305

PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters...

CVE-2023-51305

PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters...

CVE-2023-51305: Improper Neutralization of Input During Web Page Generation

PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters...

PT-2025-7289

Name of the Vulnerable Software and Affected Versions PHPJabbers Car Park Booking System version 3.0 Description The issue concerns Multiple Stored Cross-Site Scripting XSS in the parameters name, plugin sms api key, plugin sms country code, and title. This allows for the potential execution of...

CVE-2024-37602

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6 through 2021. A possible NULL pointer dereference in the Apple Car Play function affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP...

CVE-2024-37602

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6 through 2021. A possible NULL pointer dereference in the Apple Car Play function affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP...

CVE-2024-37602

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6 through 2021. A possible NULL pointer dereference in the Apple Car Play function affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP...

CVE-2024-37602

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6 through 2021. A possible NULL pointer dereference in the Apple Car Play function affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP...

PT-2025-6655

Name of the Vulnerable Software and Affected Versions Mercedes Benz NTG New Telematics Generation versions 6 through 2021 Description An issue was discovered in the Apple Car Play function, which can cause a NULL pointer dereference. This issue affects NTG 6 head units. To exploit this, an attack...

CVE-2024-37602: NULL Pointer Dereference

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6 through 2021. A possible NULL pointer dereference in the Apple Car Play function affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP...