CVE-2023-40765

User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

EUVD-2014-1086

Malware in sbrugna...

EUVD-2014-1087

Malware in sbrugna...

EUVD-2023-56058

Malicious code in bioql PyPI...

EUVD-2023-56027

Malicious code in bioql PyPI...

EUVD-2023-56019

Malicious code in bioql PyPI...

EUVD-2023-45318

Malicious code in bioql PyPI...

CVE-2014-10015

SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2023-51295

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51295

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection and Stored Cross-Site Scripting (XSS) . The root cause is the improper neutralization of special elements in the name, plugin_sms_api_key, plugin_sms_country_code, and title parameters, which allows attackers to injec...

CVE-2023-51295: Improper Neutralization of Special Elements used in a Command

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

PT-2025-20388 · Phpjabbers · Phpjabbers Event Booking Calendar

Name of the Vulnerable Software and Affected Versions: PHPJabbers Event Booking Calendar version 4.0 Description: The issue concerns multiple HTML injection vulnerabilities in the name, plugin sms api key, plugin sms country code, and title parameters. This allows for potential malicious code...

CVE-2023-51306

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "name, title" parameters...

CVE-2023-51339

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51337

PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in "lid" parameter in index...

CVE-2023-51306

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "name, title" parameters...

CVE-2023-51337

PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in "lid" parameter in index...

PT-2025-7317

Name of the Vulnerable Software and Affected Versions PHPJabbers Event Ticketing System version 1.0 Description The issue concerns a Reflected Cross-Site Scripting XSS vulnerability in the lid parameter of the index. This allows for malicious scripts to be injected and executed, potentially leadi...

PT-2025-7319

Name of the Vulnerable Software and Affected Versions PHPJabbers Event Ticketing System version 1.0 Description A lack of rate limiting in the 'Forgot Password' feature allows attackers to send an excessive amount of email to a legitimate user, leading to a possible Denial of Service DoS via a...