CVE-2023-51302: Improper Neutralization of Formula Elements in a CSV File

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51300: Improper Neutralization of Input During Web Page Generation

PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting XSS vulnerabilities in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters...

CVE-2023-51299: Improper Neutralization of Input During Web Page Generation

PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51301: Uncontrolled Resource Consumption

A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51297

The PHPJabbers Hotel Booking System v4.0 is vulnerable to a Denial of Service (DoS) attack due to a lack of rate limiting in the 'Email Settings' feature. This flaw, classified as CWE-770 (Allocation of Resources Without Limits or Throttling), allows an attacker to trigger the generation of an ex...

PT-2025-7287

Name of the Vulnerable Software and Affected Versions PHPJabbers Hotel Booking System version 4.0 Description The PHPJabbers Hotel Booking System is affected by a CSV injection vulnerability, allowing an attacker to execute remote code. This issue exists due to insufficient input validation in th...

CVE-2023-51299

PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

PHPJabbers Hotel Booking System 安全漏洞

PHPJabbers Hotel Booking System is a hotel booking system from PHPJabbers, Inc. A security vulnerability exists in PHPJabbers Hotel Booking System version 4.0, which originates from a denial of service due to a lack of rate limiting in the Login Section and Forgot Email functionality...

PT-2025-7285

Name of the Vulnerable Software and Affected Versions PHPJabbers Hotel Booking System version 4.0 Description The PHPJabbers Hotel Booking System is affected by Cross-Site Scripting XSS vulnerabilities in the name, plugin sms api key, plugin sms country code, and title parameters. This issue allo...

PT-2025-7286 · Phpjabbers · Phpjabbers Hotel Booking System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Hotel Booking System version 4.0 Description: A lack of rate limiting in the "Login Section, Forgot Email" feature allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial o...

CVE-2023-51297

A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

PT-2025-7282

Name of the Vulnerable Software and Affected Versions PHPJabbers Hotel Booking System version 4.0 Description A lack of rate limiting in the 'Email Settings' feature allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a larg...

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to a CSV Injection vulnerability (CWE-1236) that may allow an attacker to execute remote code. The root cause is insufficient input validation within the Languages section Labels ; specifically, any parameters field in System Options used to cons...

CVE-2023-51300

The PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting (XSS) and HTML injection due to the improper neutralization of input during web page generation. The affected parameters include name, plugin_sms_api_key, plugin_sms_country_code, and title. This vulnerability allows f...

PT-2025-7284

Name of the Vulnerable Software and Affected Versions PHPJabbers Hotel Booking System version 4.0 Description The issue concerns HTML Injection in the name, plugin sms api key, plugin sms country code, and title parameters. This allows for the injection of malicious HTML code, potentially leading...

CVE-2023-51300

PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting XSS vulnerabilities in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters...

CVE-2023-51299

PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51301

A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51297: Allocation of Resources Without Limits or Throttling

A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51299

PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection and Cross-Site Scripting (XSS) . The vulnerability exists in the name, plugin_sms_api_key, plugin_sms_country_code, and title parameters due to improper neutralization of input during web page generation (CWE-79 ). This flaw all...