CVE-2023-51301

A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51293

A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51297

A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51297

The PHPJabbers Hotel Booking System v4.0 is vulnerable to a Denial of Service (DoS) attack due to a lack of rate limiting in the 'Email Settings' feature. This flaw, classified as CWE-770 (Allocation of Resources Without Limits or Throttling), allows an attacker to trigger the generation of an ex...

PT-2025-7282

Name of the Vulnerable Software and Affected Versions PHPJabbers Hotel Booking System version 4.0 Description A lack of rate limiting in the 'Email Settings' feature allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a larg...

PT-2025-7280

Name of the Vulnerable Software and Affected Versions PHPJabbers Event Booking Calendar version 4.0 Description A lack of rate limiting in the 'Forgot Password' and 'Email Settings' features allows attackers to send an excessive amount of email to a legitimate user, leading to a possible Denial o...

PT-2025-7286 · Phpjabbers · Phpjabbers Hotel Booking System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Hotel Booking System version 4.0 Description: A lack of rate limiting in the "Login Section, Forgot Email" feature allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial o...

CVE-2023-51297

A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

PHPJabbers Hotel Booking System 安全漏洞

PHPJabbers Hotel Booking System is a hotel booking system from PHPJabbers, Inc. A security vulnerability exists in PHPJabbers Hotel Booking System version 4.0, which originates from a denial of service due to a lack of rate limiting in the Login Section and Forgot Email functionality...

CVE-2023-51301

The PHPJabbers Hotel Booking System v4.0 is vulnerable to a Denial of Service (DoS) attack due to a lack of rate limiting in the "Login Section, Forgot Email" feature. An attacker can trigger an excessive number of reset requests for a legitimate user, causing the system to generate a massive vol...

CVE-2023-51293

A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51301

A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51297: Allocation of Resources Without Limits or Throttling

A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51293

PHPJabbers Event Booking Calendar version 4.0 is vulnerable to a Denial of Service (DoS) attack due to a lack of rate limiting in the 'Forgot Password' and 'Email Settings' features. An attacker can exploit this to trigger an excessive amount of emails for a legitimate user, potentially exhaustin...

CVE-2025-22639

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Techspawn Distance Rate Shipping for WooCommerce distance-rate-shipping-for-woocommerce-pro allows Blind SQL Injection.This issue affects Distance Rate Shipping for WooCommerce: from n/a through =...

CVE-2025-22639

CVE-2025-22639 pertains to the WordPress plugin Distance Rate Shipping for WooCommerce (

CVE-2025-22639 WordPress Distance Rate Shipping for WooCommerce plugin <= 1.3.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in NotFound Distance Rate Shipping for WooCommerce allows Blind SQL Injection. This issue affects Distance Rate Shipping for WooCommerce: from n/a through 1.3.4...

CVE-2025-22639 WordPress Distance Rate Shipping for WooCommerce plugin <= 1.3.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Techspawn Distance Rate Shipping for WooCommerce distance-rate-shipping-for-woocommerce-pro allows Blind SQL Injection.This issue affects Distance Rate Shipping for WooCommerce: from n/a through =...

WordPress plugin Distance Rate Shipping for WooCommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

PT-2025-6952 · Woocommerce · Distance Rate Shipping For Woocommerce

Name of the Vulnerable Software and Affected Versions: Distance Rate Shipping for WooCommerce versions 1.3.4 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an SQL...