CVE-2023-40750: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing Script v1.0...

CVE-2023-40748: Improper Neutralization of Special Elements used in an SQL Command

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

CVE-2023-40753: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting XSS vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2...

CVE-2023-40751

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting XSS via the "action" parameter of index.php...

PT-2023-27613

Name of the Vulnerable Software and Affected Versions PHPJabbers Food Delivery Script version 3.0 Description The issue is a SQL injection vulnerability in the q parameter of "index.php". This allows for potential exploitation by injecting malicious SQL code. Recommendations For PHPJabbers Food...

CVE-2023-40748

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

CVE-2023-40751

PHPJabbers Fundraising Script v1.0 is affected by Cross-Site Scripting (XSS) via the action parameter in index.php (CWE-79). The Nuclei template confirms unauthenticated attackers could inject malicious JavaScript, potentially stealing administrator credentials and manipulating donation campaigns...

CVE-2023-40751

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting XSS via the "action" parameter of index.php...

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

CVE-2023-40750

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing Script v1.0...

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

CVE-2023-40749: Improper Neutralization of Special Elements used in an SQL Command

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is affected by an SQL injection in the column parameter of index.php. The underlying cause is unsanitized input (CWE-89), enabling unauthenticated attackers to potentially extract sensitive data. Impact and risk are described as high (NVD/Nuclei notes). Remedi...

PT-2023-27616 · Phpjabbers · Phpjabbers Fundraising Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Fundraising Script version 1.0 Description: The issue is related to Cross Site Scripting XSS via the action parameter of "index.php". This allows for potential malicious script execution. The estimated number of potentially affecte...

CVE-2023-40751: Improper Neutralization of Input During Web Page Generation

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting XSS via the "action" parameter of index.php...

CVE-2023-40752

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer Widget v1.0...

CVE-2023-40752: Improper Neutralization of Input During Web Page Generation

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer Widget v1.0...

PT-2023-27615

Name of the Vulnerable Software and Affected Versions PHPJabbers Yacht Listing Script version 1.0 Description There is a Cross Site Scripting XSS issue in the action parameter of the "index.php" endpoint. This allows for potential malicious script execution. Recommendations For PHPJabbers Yacht...

CVE-2023-40748

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

Food Delivery Script SQL注入漏洞

Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version v3.0, which is caused by a SQL injection vulnerability in the "column" parameter of the index.php file...