Design/Logic Flaw

User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40751

PHPJabbers Fundraising Script v1.0 is affected by Cross-Site Scripting (XSS) via the action parameter in index.php (CWE-79). The Nuclei template confirms unauthenticated attackers could inject malicious JavaScript, potentially stealing administrator credentials and manipulating donation campaigns...

CVE-2023-40762

User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

PT-2023-27616 · Phpjabbers · Phpjabbers Fundraising Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Fundraising Script version 1.0 Description: The issue is related to Cross Site Scripting XSS via the action parameter of "index.php". This allows for potential malicious script execution. The estimated number of potentially affecte...

CVE-2023-40762

CVE-2023-40762 affects PHPJabbers Fundraising Script v1.0. The vulnerability is a user enumeration flaw during password recovery: different responses reveal whether a user exists, enabling brute-force attempts with valid accounts. CVSS v3.1 metrics indicate a NETWORK attack vector, LOW attack com...

PT-2023-27627 · Phpjabbers · Phpjabbers Fundraising Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Fundraising Script version 1.0 Description: The issue is related to user enumeration, which occurs during the password recovery process. A difference in messages could allow an attacker to determine if a user is valid or not,...

CVE-2023-40751

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting XSS via the "action" parameter of index.php...

Phpjabbers Fundraising Script 跨站脚本漏洞

Phpjabbers Fundraising Script is a simple open source Php donation script from Phpjabbers Serbia. It is used for charity fundraising. A security vulnerability exists in PHPJabbers Fundraising Script v1.0, which originates from a cross-site scripting vulnerability in the "action" parameter of the...

Stivasoft Fundraising Script SQL Injection (CVE-2020-22223; CVE-2020-22225; CVE-2020-22226)

An SQL injection vulnerability exists in Stivasoft Fundraising Script. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Phpjabbers Fundraising Script has an unspecified vulnerability

Phpjabbers Fundraising Script is a simple open source Php donation script from the Serbian company Phpjabbers. Phpjabbers Fundraising Script has a security vulnerability that stems from the inclusion of an SQL injection in the pjActionSetAmount function...

Phpjabbers Fundraising Script has an unspecified vulnerability (CNVD-2021-91655)

Phpjabbers Fundraising Script is a simple open source Php donation script from the Serbian company Phpjabbers. Phpjabbers Fundraising Script has a security vulnerability that stems from the discovery of a SQL injection vulnerability contained in the pjActionLoadForm function. No details of the...

Phpjabbers Fundraising Script Cross-Site Scripting Vulnerability

Phpjabbers Fundraising Script is a simple open source Php donation script from the Serbian company Phpjabbers. Phpjabbers Fundraising Script version 1.0 has a cross-site scripting vulnerability that allows attackers to attack through the pjActionLoadCss function...

Phpjabbers Fundraising Script SQL Injection Vulnerability

Phpjabbers Fundraising Script is a simple open source Php donation script from the Serbian company Phpjabbers. Phpjabbers Fundraising Script version 1.0 has a SQL injection vulnerability, attackers can attack through the pjActionLoad function...

Phpjabbers Fundraising Script Cross-Site Scripting Vulnerability (CNVD-2021-91652)

Phpjabbers Fundraising Script is a simple open source Php donation script from the Serbian company Phpjabbers. Phpjabbers Fundraising Script version 1.0 has a cross-site scripting vulnerability that allows attackers to attack through the pjActionPreview function...

CVE-2020-22226

Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function...

CVE-2020-22225

Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function...

CVE-2020-22225

Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function...

CVE-2020-22226

Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function...

CVE-2020-22224

Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the pjActionPreview function...

CVE-2020-22224

Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the pjActionPreview function...