1046 matches found
CVE-2023-51320
CVE-2023-51320 affects PHPJabbers Night Club Booking Software v1.0. The vulnerability is a CSV Injection in the CSV export, caused by insufficient input validation on the Languages → Labels parameter (in System Options) used to construct the CSV file. The issue is evidenced by concrete exploitati...
CVE-2023-51336
The CVE-2023-51336 entry affects PHPJabbers Meeting Room Booking System v1.0. The vulnerability stems from insufficient input validation in the Languages section Labels parameter of System Options, which is used to construct CSV files. This CSV Injection can enable remote code execution and has a...
CVE-2023-51314
A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Restaurant Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51325
CVE-2023-51325 affects PHPJabbers Shared Asset Booking System v1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) issue in the title and name parameters, allowing injected scripts to be permanently stored and later executed in the victim’s context. Public references in the PacketStorm ...
CVE-2023-51321
CVE-2023-51321 describes a missing rate limit in the Forgot Password/Forgot Email flow of PHPJabbers Night Club Booking Software v1.0, enabling an attacker to trigger a high volume of email messages to a legitimate user and potentially cause a Denial of Service. The affected product is PHPJabbers...
CVE-2023-51323
CVE-2023-51323 concerns PHPJabbers Shared Asset Booking System v1.0, where a missing rate-limit in the Forgot Password/Email flow can allow an attacker to trigger a flood of email messages for a legitimate user, potentially causing a DoS. The issue is described in public writeups (e.g., PacketSto...
CVE-2023-51319
The CVE-2023-51319 issue affects PHPJabbers Bus Reservation System v1.1. The vulnerability arises from insufficient input validation in the Languages section (Labels) within System Options, which is used to construct CSV files. This CSV injection can be triggered when exporting data, enabling an ...
CVE-2023-51308
PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...
CVE-2023-51337
Vulnerability summary (CVE-2023-51337) : PHPJabbers Event Ticketing System v1.0 is vulnerable to a Reflected Cross-Site Scripting (XSS) in the lid parameter of index . The CVSS v3.1 base score is 5.4 (Medium) with attack vector Network , requiring Low privileges and User interaction . Impact is l...
CVE-2023-51318
PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...
CVE-2023-51319
PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51308
PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...
CVE-2023-51315
Summary: CVE-2023-51315 affects PHPJabbers Restaurant Booking System v3.0. The vulnerability is described as multiple stored cross-site scripting (XSS) in the parameters: seat_name, plugin_sms_api_key, plugin_sms_country_code, title, and name. The connected sources confirm the product and the aff...
CVE-2023-51336
PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...
CVE-2023-51308
PHPJabbers Car Park Booking System v3.0 is affected by multiple HTML Injection vulnerabilities in parameters name, plugin_sms_api_key, plugin_sms_country_code, and title. Listed sources describe these as HTML injection, with PacketStorm noting stored XSS for v3.0 and ENISA/Red Hat records confirm...
CVE-2023-51314
A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Restaurant Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51332
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Meeting Room Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51316
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...