Lucene search
+L

6 matches found

NVD
NVD
•added 2026/07/31 12:16 p.m.•20 views

CVE-2025-67651

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

6.9CVSS0.00223EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/31 11:40 a.m.•25 views

EUVD-2025-210568

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

6.9CVSS5.4AI score0.00223EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/31 11:40 a.m.•11 views

CVE-2025-67651 CSRF in PHP Jabbers scripts

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

6.9CVSS5.4AI score0.00223EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/31 11:40 a.m.•11 views

CVE-2025-67650

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the...

9.3CVSS5.7AI score0.00436EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/31 12:00 a.m.•2 views

CVE-2025-67650: Improper Neutralization of Special Elements used in an SQL Command

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the...

8.6CVSS5.7AI score0.00383EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/31 12:00 a.m.•0 views

CVE-2025-67651: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

6.9CVSS5.7AI score0.00223EPSS
SaveExploits0References2
Rows per page
Query Builder