Lucene search
+L

15 matches found

NVD
NVD
•added 2026/07/31 12:16 p.m.•20 views

CVE-2025-67651

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

6.9CVSS0.00223EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/31 12:16 p.m.•18 views

CVE-2025-67650

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the...

8.6CVSS0.00383EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/31 11:40 a.m.•25 views

EUVD-2025-210568

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

6.9CVSS5.4AI score0.00223EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/31 11:40 a.m.•17 views

CVE-2025-67651

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

9.3CVSS5.4AI score0.00436EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/31 11:40 a.m.•49 views

CVE-2025-67651 CSRF in PHP Jabbers scripts

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

6.9CVSS0.00223EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/31 11:40 a.m.•58 views

CVE-2025-67651

The CVE-2025-67651 entry describes a Cross-Site Request Forgery (CSRF) flaw in multiple PHP Jabbers scripts. The root cause is missing CSRF tokens and/or improper SameSite attributes, allowing an attacker to perform actions in an authenticated user’s context, notably creating new admin accounts. ...

6.9CVSS5.7AI score0.00223EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/31 11:40 a.m.•12 views

CVE-2025-67651 CSRF in PHP Jabbers scripts

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

6.9CVSS5.4AI score0.00223EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/31 11:40 a.m.•12 views

CVE-2025-67650

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the...

9.3CVSS5.7AI score0.00436EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/31 11:40 a.m.•15 views

CVE-2025-67650 Authenticated SQL Injection in PHP Jabbers scripts

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the...

8.6CVSS5.8AI score0.00383EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/31 11:40 a.m.•54 views

CVE-2025-67650

Technical details (affected products/versions, root cause specifics, fixes) are not publicly provided in the provided documents. Monitor for updates from official sources to obtain concrete details.

8.6CVSS5.7AI score0.00383EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/31 11:40 a.m.•52 views

CVE-2025-67650 Authenticated SQL Injection in PHP Jabbers scripts

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the...

8.6CVSS0.00383EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/31 11:40 a.m.•22 views

EUVD-2025-210567

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the...

8.6CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/31 12:00 a.m.•32 views

PT-2026-66749

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

6.9CVSS5.4AI score0.00223EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/31 12:00 a.m.•1 views

CVE-2025-67651: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

6.9CVSS5.7AI score0.00223EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/31 12:00 a.m.•3 views

CVE-2025-67650: Improper Neutralization of Special Elements used in an SQL Command

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the...

8.6CVSS5.7AI score0.00383EPSS
SaveExploits0References2
Rows per page
Query Builder