4612 matches found
CVE-2023-40766
User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-40766
User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-40753
There is a Cross Site Scripting XSS vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2...
CVE-2023-40753
There is a Cross Site Scripting XSS vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2...
CVE-2023-40753
There is a Cross Site Scripting XSS vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2...
Cross site scripting
There is a Cross Site Scripting XSS vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2...
CVE-2023-40753
CVE-2023-40753 affects PHPJabbers Ticket Support Script v3.2. A Cross-Site Scripting (XSS) vulnerability exists in the message parameter of index.php. Exploitation could allow authenticated attackers to inject JavaScript via ticket notification messages, potentially stealing session cookies or ac...
PT-2023-27618 · Phpjabbers · Phpjabbers Ticket Support Script
Name of the Vulnerable Software and Affected Versions: PHPJabbers Ticket Support Script version 3.2 Description: There is a Cross Site Scripting XSS issue in the message parameter of "index.php" in PHPJabbers Ticket Support Script. This allows for potential malicious script execution...
CVE-2023-40766
CVE-2023-40766 affects PHPJabbers Ticket Support Script v3.2. The vulnerability is a user-enumeration flaw observed during password recovery, where differing responses could reveal whether a username exists, enabling brute-force attempts with valid users. Documented impact from NVD indicates a cr...
CVE-2023-40766
User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-40753
There is a Cross Site Scripting XSS vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2...
CVE-2023-40753
There is a Cross Site Scripting XSS vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2...
Ticket Support Script 跨站脚本漏洞
Ticket Support Script is an affordable online help desk system. A security vulnerability exists in PHPJabbers Ticket Support Script version v3.2, which is caused by a cross-site scripting vulnerability in the "message" parameter of the index.php file...
Ticket Support Script 安全漏洞
Ticket Support Script is an affordable online help desk system. A security vulnerability exists in Ticket Support Script version v3.2, which originates from a user enumeration vulnerability during password reset...
PT-2023-27631 · Phpjabbers · Phpjabbers Ticket Support Script
Name of the Vulnerable Software and Affected Versions: PHPJabbers Ticket Support Script version 3.2 Description: The issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid...
WordPress Event Tickets with Ticket Scanner Plugin < 1.5.5 is vulnerable to Cross Site Scripting (XSS)
Software Event Tickets with Ticket Scanner Type Plugin Vulnerable versions 1.5.5 Fixed in 1.5.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID daa37a82b56a Credits Unknown...
CVE-2023-31943
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticketid parameter at ticketdetail.php...
CVE-2023-31943
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticketid parameter at ticketdetail.php...
Online Travel Agency System SQL注入漏洞
Online Travel Agency System is an online travel agency system by Qaseem Hilal, an individual developer. A security vulnerability exists in Online Travel Agency System version v.1.0, which can be exploited to execute arbitrary code from the ticketid parameter of the ticketdetail.php file...