Time Slots Booking Calendar Security Breach

PHPJabbers Time Slots Booking Calendar is a booking system from the Serbian company PHPJabbers. A security vulnerability exists in Time Slots Booking Calendar version 4.0, which stems from an HTML injection vulnerability in several parameters, including name...

CVE-2023-48827

Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...

CVE-2023-48827

CVE-2023-48827 affects PHPJabbers Time Slots Booking Calendar 4.0. The vulnerability is an HTML injection (XSS) flaw caused by insufficient sanitization in multiple parameters (name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, customer_name). Impact is web-page ...

Time Slots Booking Calendar Security Breach

PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers Serbia. A security vulnerability exists in Time Slots Booking Calendar version 4.0, which stems from a CSV injection vulnerability in the ID field...

Time Slots Booking Calendar Security Breach

PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers Serbia. A security vulnerability exists in Time Slots Booking Calendar version 4.0, which stems from a lack of rate limiting in pjActionAJaxSend, allowing an attacker to exhaust system resources...

CVE-2023-48826

Time Slots Booking Calendar 4.0 (PHPJabbers) is vulnerable to CSV injection via the unique ID field in the Reservations List. The root cause is insufficient input validation when exporting to CSV, enabling crafted ID values to inject CSV content. The vulnerability can lead to high-impact outcomes...

CVE-2023-48833

A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers to cause resource exhaustion...

CVE-2023-48828

Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...

CVE-2023-48833

Summary: CVE-2023-48833 affects Time Slots Booking Calendar (v4.0). The vulnerability is a lack of rate limiting in the function pjActionAJaxSend , which can be abused to cause resource exhaustion. The issue is documented with a base score of 7.5 (HIGH) on CVSS 3.1, with network attack vector and...

CVE-2023-48826

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List...

Time Slots Booking Calendar Security Breach

PHPJabbers Time Slots Booking Calendar is a booking system from the Serbian company PHPJabbers. A security vulnerability exists in Time Slots Booking Calendar version 4.0, which stems from a stored cross-site scripting XSS vulnerability in several parameters, including name...

CVE-2023-48828

CVE-2023-48828 affects Time Slots Booking Calendar 4.0. The vulnerability is a stored cross-site scripting (XSS) flaw exploitable via multiple parameters: name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, and customer_name. Public sources (PacketStorm) document ...

PT-2023-30972 · Unknown · Time Slots Booking Calendar

Name of the Vulnerable Software and Affected Versions: Time Slots Booking Calendar version 4.0 Description: The issue concerns Multiple Stored Cross-Site Scripting XSS problems. These issues can be exploited via several parameters, including name, plugin sms api key, plugin sms country code,...

PT-2023-30976 · Unknown · Time Slots Booking Calendar

Name of the Vulnerable Software and Affected Versions: Time Slots Booking Calendar version 4.0 Description: A lack of rate limiting in the pjActionAJaxSend function allows attackers to cause resource exhaustion. Recommendations: For Time Slots Booking Calendar version 4.0, consider implementing...

PHPJabbers Time Slots Booking Calendar 4.0 Missing Rate Limiting

Exploit Title: PHPJabbers Time Slots Booking Calendar v4.0 - No Rate Limit in Email Date: 19/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/time-slots-booking-calendar/ Version: v4.0 Tested...

PHPJabbers Time Slots Booking Calendar 4.0 HTML Injection

Exploit Title: PHPJabbers Time Slots Booking Calendar v4.0 - HTML Injection Date: 13/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/time-slots-booking-calendar/ Version: v4.0 Tested on:...

PHPJabbers Time Slots Booking Calendar 4.0 Cross Site Scripting

Exploit Title: PHPJabbers Time Slots Booking Calendar v4.0 - Multiple Stored XSS Date: 13/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/time-slots-booking-calendar/ Version: v4.0 Tested on...

PHPJabbers Time Slots Booking Calendar 4.0 CSV Injection

Exploit Title: PHPJabbers Time Slots Booking Calendar v4.0 - CSV Injection Date: 13/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/time-slots-booking-calendar/ Version: v4.0 Tested on:...

CVE-2023-33564

There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...

CVE-2023-33563

In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...