CVE-2023-4115

CVE-2023-4115 affects PHP Jabbers Cleaning Business 1.0. The vulnerability is an unauthenticated cross-site scripting via the index parameter in /index.php, enabling an attacker to craft a link that can steal session tokens or credentials. Public templates and reports describe reflected XSS in /i...

CVE-2023-4115 PHP Jabbers Cleaning Business index.php cross site scripting

A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. VDB-235962 is the identifier...

Cleaning Business Software Security Vulnerability

Cleaning Business Software is an open source cleaning business software by PHPJabbers. PHPJabbers Cleaning Business Software version 1.0 has a security vulnerability , the vulnerability stems from the password recovery function , through the message difference can determine whether the user is...

PHPJabbers Cleaning Business Software Data Forgery Issue Vulnerability

Cleaning Business Software is an open source cleaning business software from PHPJabbers. A security vulnerability exists in version 1.0 of PHPJabbers Cleaning Business Software that stems from a lack of authentication when changing e-mail addresses and/or passwords, allowing a remote attacker to...

CVE-2023-36141: Undefined Security Weakness

User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

PT-2023-25448 · Phpjabbers · Phpjabbers Cleaning Business

Name of the Vulnerable Software and Affected Versions: PHPJabbers Cleaning Business Software version 1.0 Description: The issue is related to Cross Site Scripting XSS via the theme parameter of the "preview.php" endpoint. This allows for potential malicious script injection. No information is...

CVE-2023-36141

User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-36138

PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting XSS via the theme parameter of preview.php...

CVE-2023-36141

User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-36139

In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...

CVE-2023-36138: Improper Neutralization of Input During Web Page Generation

PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting XSS via the theme parameter of preview.php...

CVE-2023-36139

CVE-2023-36139 affects PHPJabbers Cleaning Business Software 1.0. The connected documents describe a vulnerability where the application lacks verification when changing an email address and/or password on the Profile Page, enabling remote attackers to take over accounts. The root cause is insuff...

PHPJabbers Cleaning Business Software Cross-Site Scripting Vulnerability

Cleaning Business Software is an open source cleaning business software by PHPJabbers. PHPJabbers Cleaning Business Software version 1.0 has a security vulnerability that stems from a cross-site scripting XSS vulnerability in the theme parameter of preview.php...

CVE-2023-36138

CVE-2023-36138 affects PHPJabbers Cleaning Business Software 1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable through the theme parameter of preview.php. Root cause cited is unsanitized or improperly handled input in the theme parameter, leading to potential script injectio...

CVE-2023-36141

CVE-2023-36141 affects PHPJabbers Cleaning Business Software 1.0. The password-recovery path leaks whether a user exists via differing response messages, enabling brute-force attempts with valid users (CVSSv3.1 base 5.3; Network, Low attack complexity, No privileges, No user interaction). Remedia...

CVE-2023-4115: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. VDB-235962 is the identifier...

CVE-2023-36139: Insufficient Verification of Data Authenticity

In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...

Cleaning Business Software 跨站脚本漏洞

Cleaning Business Software is PHPJabbers open source a cleaning business software. Cleaning Business Software v1.0 version of the existence of cross-site scripting vulnerabilities , the vulnerability stems from the file / index.php parameter index of the user-supplied data lack of effective...

CVE-2023-36139

In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...

PT-2023-25449

Name of the Vulnerable Software and Affected Versions PHPJabbers Cleaning Business Software version 1.0 Description The issue allows remote attackers to take over accounts due to a lack of verification when changing an email address and/or password on the Profile Page. Recommendations For...