CVE-2024-57429

CVE-2024-57429 PHPJabbers Cinema Booking System v2.0의 pjActionUpdate 함수에 있는 사이트 간 요청 위조CSRF 취약점으로, 원격 공격자가 인증된 관리자를 속여 승인되지 않은 요청을 제출하게 함으로써 권한을 상승시킬 수 있습니다. 영향: 이 CSRF 취약점을 악용하면 다음과 같은 무단 작업이 발생할 수 있습니다. 관리자의 비밀번호를 변경하여 사실상 관리자를 잠그는 행위. 사용자 역할을 업데이트하여 공격자의 권한을 관리자로 상승시키는 행위. 익스플로잇 - 개념 증명POC 사이트...

EUVD-2023-56056

Malicious code in bioql PyPI...

EUVD-2023-56055

Malicious code in bioql PyPI...

EUVD-2024-53585

Malicious code in bioql PyPI...

EUVD-2024-53584

Malicious code in bioql PyPI...

EUVD-2024-53582

Malicious code in bioql PyPI...

CVE-2023-51334

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51330

PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in Now Showing menu "date" parameter...

CVE-2023-51333

PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51335

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51335

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51333

PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51334

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51335

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51330

PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in Now Showing menu "date" parameter...

PHPJabbers Cinema Booking System 安全漏洞

PHPJabbers Cinema Booking System is a theater booking system from PHPJabbers. A security vulnerability exists in PHPJabbers Cinema Booking System version 1.0, which stems from vulnerability to stored cross-site scripting attacks...

CVE-2023-51334

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51335

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51333

The PHPJabbers Cinema Booking System v1.0 is vulnerable to a CSV Injection (CWE-1236) that allows for remote code execution . The root cause is insufficient input validation on the Labels parameter field within the Languages section of System Options , which is used to construct a CSV file. As a ...

CVE-2023-51330

PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in Now Showing menu "date" parameter...