CVE-2024-57427

CVE-2024-57427 - Cross-Site Scripting XSS Reflejado PHPJabbers Cinema Booking System v2.0 es vulnerable a cross-site scripting XSS reflejado. Múltiples endpoints manejan de forma incorrecta la entrada del usuario, permitiendo que scripts maliciosos se ejecuten en el navegador de la víctima. Los...

CVE-2024-57428

CVE-2024-57428 Existe una vulnerabilidad de Cross-Site Scripting XSS almacenado en PHPJabbers Cinema Booking System v2.0 debido a la entrada sin sanitizar en los campos de subida de archivos eventimg, seatmaps y en las configuraciones de numeración de asientos numbernewX en pjActionCreate. Los...

CVE-2024-57429

CVE-2024-57429 Una vulnerabilidad de falsificación de solicitudes entre sitios CSRF en la función pjActionUpdate de PHPJabbers Cinema Booking System v2.0 permite a atacantes remotos escalar privilegios engañando a un administrador autenticado para que envíe una solicitud no autorizada. Impacto: L...

CVE-2024-57430

CVE-2024-57430 Una vulnerabilidad de inyección SQL en la función pjActionGetUser de PHPJabbers Cinema Booking System v2.0 permite a los atacantes manipular consultas de la base de datos a través del parámetro column. Explotar esta falla puede provocar divulgación no autorizada de información,...

EUVD-2023-56055

Malicious code in bioql PyPI...

EUVD-2023-56056

Malicious code in bioql PyPI...

EUVD-2024-53585

Malicious code in bioql PyPI...

EUVD-2024-53582

Malicious code in bioql PyPI...

EUVD-2024-53584

Malicious code in bioql PyPI...

EUVD-2023-56051

Malicious code in bioql PyPI...

CVE-2023-51334

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51330

PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in Now Showing menu "date" parameter...

CVE-2023-51333

PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51335

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51335

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51333

PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51334

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51335

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51330

PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in Now Showing menu "date" parameter...

CVE-2023-51335

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...