1050 matches found
Design/Logic Flaw
User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
Design/Logic Flaw
User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
Cross site scripting
There is a Cross Site Scripting XSS vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2...
Sql injection
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...
CVE-2023-40749
PHPJabbers Food Delivery Script v3.0 is affected by an SQL injection in the column parameter of index.php. The underlying cause is unsanitized input (CWE-89), enabling unauthenticated attackers to potentially extract sensitive data. Impact and risk are described as high (NVD/Nuclei notes). Remedi...
CVE-2023-40750
CVE-2023-40750 concerns PHPJabbers Yacht Listing Script v1.0, where a Cross-Site Scripting (XSS) flaw exists in the action parameter of index.php. The connected sources describe an unauthenticated input that can inject JavaScript through this parameter, enabling manipulation of yacht listings and...
CVE-2023-40748
PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...
CVE-2023-40749
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...
CVE-2023-40752
There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer Widget v1.0...
PT-2023-27626 · Phpjabbers · Phpjabbers Yacht Listing Script
Name of the Vulnerable Software and Affected Versions: PHPJabbers Yacht Listing Script version 2.0 Description: The issue is related to user enumeration, which occurs during password recovery. A difference in messages could allow an attacker to determine if a user is valid or not, enabling a brut...
CVE-2023-40765
Affected software: PHPJabbers Event Booking Calendar v4.0. Vulnerability: user enumeration during the password recovery flow, where messages differ for valid versus invalid usernames. This in turn can enable brute-forcing of existing accounts. The issue is consistently described across multiple s...
CVE-2023-40767
User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-40766
CVE-2023-40766 affects PHPJabbers Ticket Support Script v3.2. The vulnerability is a user-enumeration flaw observed during password recovery, where differing responses could reveal whether a username exists, enabling brute-force attempts with valid users. Documented impact from NVD indicates a cr...
CVE-2023-40762
CVE-2023-40762 affects PHPJabbers Fundraising Script v1.0. The vulnerability is a user enumeration flaw during password recovery: different responses reveal whether a user exists, enabling brute-force attempts with valid accounts. CVSS v3.1 metrics indicate a NETWORK attack vector, LOW attack com...
CVE-2023-40761
User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-40752
PHPJabbers Make an Offer Widget v1.0 is affected by a Cross-Site Scripting (XSS) vulnerability in the action parameter of index.php. The issue, confirmed across multiple sources, allows unauthenticated input in the action parameter to be reflected in the page, with user interaction required. This...
CVE-2023-40751
PHPJabbers Fundraising Script v1.0 is affected by Cross-Site Scripting (XSS) via the action parameter in index.php (CWE-79). The Nuclei template confirms unauthenticated attackers could inject malicious JavaScript, potentially stealing administrator credentials and manipulating donation campaigns...
CVE-2023-40753
CVE-2023-40753 affects PHPJabbers Ticket Support Script v3.2. A Cross-Site Scripting (XSS) vulnerability exists in the message parameter of index.php. Exploitation could allow authenticated attackers to inject JavaScript via ticket notification messages, potentially stealing session cookies or ac...
PT-2023-27618 · Phpjabbers · Phpjabbers Ticket Support Script
Name of the Vulnerable Software and Affected Versions: PHPJabbers Ticket Support Script version 3.2 Description: There is a Cross Site Scripting XSS issue in the message parameter of "index.php" in PHPJabbers Ticket Support Script. This allows for potential malicious script execution...