1050 matches found
CVE-2023-39776
A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2023-36310
Summary (CVE-2023-36310): A cross-site scripting (XSS) vulnerability exists in PHPJabbers Document Creator v1.0, specifically in the column parameter of index.php. The root cause is unvalidated input in the column parameter leading to script execution. The NVD entry rates it as CVSS v3.1 base sco...
CVE-2023-36314
There is a Cross Site Scripting XSS vulnerability in the value-text-osmsemailrequestmessage parameters of index.php in PHPJabbers Callback Widget v1.0...
CVE-2023-36312
PHPJabbers Callback Widget v1.0 contains a Cross-Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php. The root cause is improper handling of user-controlled input in this parameter, enabling script execution in the browser. The issue is identified acr...
PT-2023-25524 · Phpjabbers · Phpjabbers Document Creator
Name of the Vulnerable Software and Affected Versions: PHPJabbers Document Creator version 1.0 Description: There is a Cross Site Scripting XSS issue in the action parameter of "index.php" in PHPJabbers Document Creator. This allows for potential malicious script execution. Recommendations: For...
CVE-2023-38830
An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module...
PHPJabbers Vacation Rental Script 4.0 Cross Site Request Forgery
Exploit Title: PHPJabbers Vacation Rental Script 4.0 - CSRF Date: 05/08/2023 Exploit Author: Hasan Ali YILDIR Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/vacation-rental-script/ Version: 4.0 Tested on: Windows 10 Pro Description The attacker can send to...
CVE-2023-36136
PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account update user page allowing an attacker to capture all user names and passwords in clear text...
CVE-2023-36136
PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account update user page allowing an attacker to capture all user names and passwords in clear text...
CVE-2023-36136
PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account update user page allowing an attacker to capture all user names and passwords in clear text...
CVE-2023-36136
The CVE affects PHPJabbers Class Scheduling System 1.0. The issue is that password handling on the update user page lacks encryption, allowing an attacker to capture all usernames and passwords in clear text. This directly impacts confidentiality and enables credential exposure without requiring ...
PT-2023-25446 · Phpjabbers · Phpjabbers Class Scheduling System
Name of the Vulnerable Software and Affected Versions: PHPJabbers Class Scheduling System version 1.0 Description: The issue is related to a lack of encryption on passwords when editing a user account, specifically on the update user page. This allows an attacker to capture all user names and...
CVE-2023-36136
PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account update user page allowing an attacker to capture all user names and passwords in clear text...
PHPJabbers Vacation Rental Script 4.0 - CSRF Vulnerability
Exploit Title: PHPJabbers Vacation Rental Script 4.0 - CSRF Exploit Author: Hasan Ali YILDIR Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/vacation-rental-script/ Version: 4.0 Tested on: Windows 10 Pro Description The attacker can send to victim a link...
Cleaning Business Software Cross-Site Scripting Vulnerability
Cleaning Business Software is PHPJabbers open source a cleaning business software. Cleaning Business Software v1.0 version of the existence of cross-site scripting vulnerabilities , the vulnerability stems from the file / index.php parameter index of the user-supplied data lack of effective...
CVE-2023-36141
User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-36139
In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...
CVE-2023-36139
In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...