Design/Logic Flaw

User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

Sql injection

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

Sql injection

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

CVE-2023-40748

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is affected by an SQL injection in the column parameter of index.php. The underlying cause is unsanitized input (CWE-89), enabling unauthenticated attackers to potentially extract sensitive data. Impact and risk are described as high (NVD/Nuclei notes). Remedi...

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

PT-2023-27622 · Phpjabbers · Phpjabbers Food Delivery Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Food Delivery Script version 3.1 Description: The issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid user...

Food Delivery Script SQL注入漏洞

Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version v3.0, which is caused by a SQL injection vulnerability in the "column" parameter of the index.php file...

Food Delivery Script 安全漏洞

Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version v3.1, which stems from a user enumeration vulnerability during password reset...

CVE-2023-40748

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

CVE-2023-40748

CVE-2023-40748 affects PHPJabbers Food Delivery Script 3.0. The NVD and nuclei data confirm a SQL injection in the q parameter of index.php, enabling unauthorized database access. Root cause: improper sanitization in the q parameter leading to SQLi (CWE-89). Impact notes in sources indicate attac...

CVE-2023-40757

The CVE-2023-40757 entry concerns PHPJabbers Food Delivery Script v3.1. The vulnerability is a user-enumeration flaw in the password-recovery flow: an attacker can distinguish between valid and invalid usernames based on response messages, enabling brute-forcing valid user accounts. Affected soft...

CVE-2023-40757

User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

Food Delivery Script SQL注入漏洞

Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version 3.0, which is caused by a SQL injection vulnerability in the "q" parameter of the index.php file...

CVE-2023-4559

A vulnerability, which was classified as critical, has been found in Bettershop LaikeTui. Affected by this issue is some unknown functionality of the file index.php?module=api&action=user&m=upload of the component POST Request Handler. The manipulation leads to unrestricted upload. The attack may...

delivery-service-systems.de Cross Site Scripting vulnerability OBB-3620045

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

How to Remove Users That Can Access the Delivery Group via PowerShell

This article is designed to describe how to remove users in the below screenshot via powershell instead of using UI. Disclaimer: information displayed in screenshots are Citrix test server data...

“The Access Policy has externally been modified and cannot be changed by Studio” warning message

After setting access policy rule, “Access Policy” option in “Edit Delivery Group” dialog cannot display. ------------------------ Add-PSSnapin -Name Citrix. Set-BrokerAccessPolicyRule 'AG' -IncludedClientIPFilterEnabled $True Set-BrokerAccessPolicyRule 'AG' -IncludedClientIPs xxx.xxx.xxx.xxx...

Session Prelaunch Is Not Working

Prelaunch is enabled on the delivery group. Users are authorized for Prelaunch is not working...

SUSE-SU-2023:3394-1 Security update for postfix

This update for postfix fixes the following issues: - CVE-2023-32182: Fixed configpostfix SUSE specific script potentially bad /tmp file usage bsc1211196. - Update to from 3.7.2 to 3.7.3: - Fixes a bug where some messages were not delivered after 'warning: Unexpected record type 'X'. bsc1213515...