Design/Logic Flaw

User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

Sql injection

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

Sql injection

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

CVE-2023-40757

User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40757: Generation of Error Message Containing Sensitive Information

User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40748

CVE-2023-40748 affects PHPJabbers Food Delivery Script 3.0. The NVD and nuclei data confirm a SQL injection in the q parameter of index.php, enabling unauthorized database access. Root cause: improper sanitization in the q parameter leading to SQLi (CWE-89). Impact notes in sources indicate attac...

CVE-2023-40757

The CVE-2023-40757 entry concerns PHPJabbers Food Delivery Script v3.1. The vulnerability is a user-enumeration flaw in the password-recovery flow: an attacker can distinguish between valid and invalid usernames based on response messages, enabling brute-forcing valid user accounts. Affected soft...

Food Delivery Script 安全漏洞

Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version v3.1, which stems from a user enumeration vulnerability during password reset...

PT-2023-27622 · Phpjabbers · Phpjabbers Food Delivery Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Food Delivery Script version 3.1 Description: The issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid user...

CVE-2023-40748

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

CVE-2023-40749: Improper Neutralization of Special Elements used in an SQL Command

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

Food Delivery Script SQL注入漏洞

Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version 3.0, which is caused by a SQL injection vulnerability in the "q" parameter of the index.php file...

CVE-2023-40748

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

CVE-2023-40748: Improper Neutralization of Special Elements used in an SQL Command

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is affected by an SQL injection in the column parameter of index.php. The underlying cause is unsanitized input (CWE-89), enabling unauthenticated attackers to potentially extract sensitive data. Impact and risk are described as high (NVD/Nuclei notes). Remedi...

PT-2023-27614

Name of the Vulnerable Software and Affected Versions PHPJabbers Food Delivery Script version 3.0 Description The issue is related to SQL Injection in the column parameter of "index.php". This allows for potential exploitation. No information is provided about the estimated number of potentially...

PT-2023-27613

Name of the Vulnerable Software and Affected Versions PHPJabbers Food Delivery Script version 3.0 Description The issue is a SQL injection vulnerability in the q parameter of "index.php". This allows for potential exploitation by injecting malicious SQL code. Recommendations For PHPJabbers Food...

Food Delivery Script SQL注入漏洞

Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version v3.0, which is caused by a SQL injection vulnerability in the "column" parameter of the index.php file...

CVE-2021-22872

Revive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting XSS vulnerability via the publicly accessible afr.php delivery script. While this issue was previously addressed in modern browsers as CVE-2020-8115, some older browsers e.g., IE10 that do not automatically URL encode...

CVE-2021-22872

Revive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting XSS vulnerability via the publicly accessible afr.php delivery script. While this issue was previously addressed in modern browsers as CVE-2020-8115, some older browsers e.g., IE10 that do not automatically URL encode...