7 matches found
EUVD-2023-56037
Malicious code in bioql PyPI...
EUVD-2023-56035
Malicious code in bioql PyPI...
EUVD-2023-56014
Malicious code in bioql PyPI...
CVE-2023-51337
PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in "lid" parameter in index...
CVE-2023-51334
CVE-2023-51334 affects PHPJabbers Cinema Booking System v1.0, where the Forgot Password / reset mechanism lacks rate limiting. The documented impact is that an attacker can abuse the feature to trigger a large volume of email messages to a legitimate user, potentially causing a Denial of Service....
PHPJabbers Cinema Booking System 2.0 Cross Site Scripting Vulnerability
CVE-2024-57428 A stored cross-site scripting XSS vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields eventimg, seatmaps and seat number configurations numbernewX in pjActionCreate. Attackers can inject persistent JavaScript, leading to...
CVE-2014-10010
Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter in a pjActionDownload action to the pjBackup controller...