EUVD-2023-56014

Malicious code in bioql PyPI...

EUVD-2023-56035

Malicious code in bioql PyPI...

EUVD-2023-56037

Malicious code in bioql PyPI...

CVE-2023-51337

PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in "lid" parameter in index...

CVE-2023-51334

The PHPJabbers Cinema Booking System v1.0 is vulnerable to a lack of rate limiting in the 'Forgot Password' (or 'Forgot Email') feature. This flaw allows an attacker to send an excessive amount of reset requests for a legitimate user, potentially causing a Denial of Service (DoS) through the gene...

PHPJabbers Cinema Booking System 2.0 Cross Site Scripting Vulnerability

CVE-2024-57428 A stored cross-site scripting XSS vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields eventimg, seatmaps and seat number configurations numbernewX in pjActionCreate. Attackers can inject persistent JavaScript, leading to...

CVE-2014-10010

Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter in a pjActionDownload action to the pjBackup controller...