CVE-2023-36310

There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36315

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0...

PT-2023-25528 · Phpjabbers · Phpjabbers Callback Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Callback Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the value-enum-o bf include timezone parameter of index.php. This allows for potential malicious script execution. Recommendations: For PHPJabber...

PT-2023-25530 · Phpjabbers · Phpjabbers Callback Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Callback Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the value-text-o sms email request message parameters of index.php. This allows for potential malicious script execution. Recommendations: For...

CVE-2023-36309: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36309

CVE-2023-36309 affects PHPJabbers Document Creator v1.0, with a Cross-Site Scripting (XSS) flaw in the action parameter of index.php. The issue is documented across multiple sources (NVD, Red Hat, CVE lists) with the vulnerability described as XSS in the action parameter, but concrete exploit det...

PT-2023-25524 · Phpjabbers · Phpjabbers Document Creator

Name of the Vulnerable Software and Affected Versions: PHPJabbers Document Creator version 1.0 Description: There is a Cross Site Scripting XSS issue in the action parameter of "index.php" in PHPJabbers Document Creator. This allows for potential malicious script execution. Recommendations: For...

CVE-2023-36312: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting XSS vulnerability in the value-enum-obfincludetimezone parameter of index.php in PHPJabbers Callback Widget v1.0...

CVE-2023-36314: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting XSS vulnerability in the value-text-osmsemailrequestmessage parameters of index.php in PHPJabbers Callback Widget v1.0...

CVE-2023-36311: Improper Neutralization of Special Elements used in an SQL Command

There is a SQL injection SQLi vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36314

CVE-2023-36314 describes a Cross Site Scripting (XSS) vulnerability in PHPJabbers Callback Widget v1.0, specifically in the value-text-o_sms_email_request_message parameter of index.php. Connected documents confirm the affected product and vulnerable parameter. No exploitation details are provide...

CVE-2023-36310

There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36311

CVE-2023-36311: SQL injection in the PHPJabbers Document Creator v1.0, triggered by the column parameter of index.php. Affects PHPJabbers Document Creator; root cause is unsafely handled SQL in the column param. Documented references indicate high risk (NVD/Red Hat entries) with no explicit explo...

CVE-2023-36310: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36315: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0...

CVE-2023-36306: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code via the asktheoracle.php, details.php, index.php, search.php, export.php, reports.php, and statistics.php components...

CVE-2023-4191

A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The...

Design/Logic Flaw

A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The...

CVE-2023-4191 SourceCodester Resort Reservation System index.php file inclusion

A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The...

CVE-2023-4191: External Control of File Name or Path

A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The...