CVE-2024-57429

CVE-2024-57429 Uma vulnerabilidade de cross-site request forgery CSRF na função pjActionUpdate do PHPJabbers Cinema Booking System v2.0 permite que atacantes remotos elevem privilégios ao enganar um administrador autenticado para submeter uma requisição não autorizada. Impacto: A exploração desta...

CVE-2024-57428

CVE-2024-57428 Una vulnerabilità di cross-site scripting XSS memorizzato in PHPJabbers Cinema Booking System v2.0 esiste a causa dell'input non sanificato nei campi di caricamento file eventimg, seatmaps e nelle configurazioni dei numeri dei posti numbernewX in pjActionCreate. Gli attaccanti...

CVE-2024-57427

CVE-2024-57427 - Cross-Site Scripting Riflesso XSS PHPJabbers Cinema Booking System v2.0 è vulnerabile a cross-site scripting riflesso XSS. Molti endpoint gestiscono in modo improprio l'input utente, consentendo l'esecuzione di script dannosi nel browser della vittima. Gli attaccanti possono crea...

CVE-2024-57430

CVE-2024-57430 Eine SQL-Injection-Schwachstelle in der Funktion pjActionGetUser des PHPJabbers Cinema Booking System v2.0 ermöglicht es Angreifern, Datenbankabfragen über den Parameter column zu manipulieren. Die Ausnutzung dieses Fehlers kann zu unbefugter Offenlegung von Informationen,...

EUVD-2023-56056

Malicious code in bioql PyPI...

EUVD-2023-56055

Malicious code in bioql PyPI...

EUVD-2023-56051

Malicious code in bioql PyPI...

EUVD-2024-53582

Malicious code in bioql PyPI...

EUVD-2024-53584

Malicious code in bioql PyPI...

EUVD-2024-53585

Malicious code in bioql PyPI...

CVE-2023-51334

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51330

PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in Now Showing menu "date" parameter...

CVE-2023-51333

PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51335

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51335

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51333

PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51334

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51335

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51330

PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in Now Showing menu "date" parameter...

PHPJabbers Cinema Booking System 安全漏洞

PHPJabbers Cinema Booking System is a theater booking system from PHPJabbers. A security vulnerability exists in PHPJabbers Cinema Booking System version 1.0, which stems from vulnerability to stored cross-site scripting attacks...