1050 matches found
CVE-2023-36131
CVE-2023-36131 affects PHPJabbers Availability Booking Calendar 5.0. The issue is an Incorrect Access Control due to improper input validation of the password parameter, enabling unauthorized access. CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 9.8). Exploitation likely over t...
PT-2023-25445 · Phpjabbers · Phpjabbers Class Scheduling System
Name of the Vulnerable Software and Affected Versions: PHPJabbers Class Scheduling System version 1.0 Description: The issue is related to user enumeration, which occurs during the password recovery process. A difference in messages could allow an attacker to determine if a user is valid or not,...
PHPJabbers Rental Property Booking 2.0 Cross Site Scripting
Exploit Title: PHPJabbers Rental Property Booking 2.0 - Reflected XSS Exploit Author: CraCkEr Date: 22/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/rental-property-booking-calendar/ Tested on: Windows 10 Pro Impact: Manipulate t...
CVE-2023-34869
PHPJabbers Catering System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php?controller=pjAdmin&action=pjActionForgot...
CVE-2023-34869
PHPJabbers Catering System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php?controller=pjAdmin&action=pjActionForgot...
CVE-2023-34869
PHPJabbers Catering System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php?controller=pjAdmin&action=pjActionForgot...
CVE-2023-33564
There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...
CVE-2023-33560
There is a Cross Site Scripting XSS vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...
CVE-2023-33560
There is a Cross Site Scripting XSS vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...
Cross site scripting
There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...
Cross site scripting
PHPJabbers Catering System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php?controller=pjAdmin&action=pjActionForgot...
Cross site scripting
There is a Cross Site Scripting XSS vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...
CVE-2023-33560
CVE-2023-33560: There is a Cross Site Scripting (XSS) vulnerability in the cid parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3. Affects the vulnerable component and function, enabling client-side script execution due to unsanitized input in cid. Public sources consistently...
CVE-2023-33564
CVE-2023-33564 describes a Cross Site Scripting (XSS) vulnerability in the PHPJabbers Time Slots Booking Calendar v3.3, specifically in the theme parameter of preview.php. The issue is documented across multiple sources (NVD, Red Hat, CVE listing, and vendor/third-party pages). The vulnerability ...
CVE-2023-34869
The CVE-2023-34869 entry describes a cross-site scripting (XSS) vulnerability in PHPJabbers Catering System v1.0 triggered via the /index.php?controller=pjAdmin&action=pjActionForgot component. Affected software is PHPJabbers Catering System v1.0; the vulnerability arises from the specified forgo...
CVE-2023-33564
There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...
PHPJabbers Time Slots Booking Calendar Authorization Issues Vulnerability
PHPJabbers Time Slots Booking Calendar is a booking system by PHPJabbers. A security vulnerability exists in PHPJabbers Time Slots Booking Calendar version v3.3, which stems from a lack of validation when changing an email address or password on the profile page, allowing a remote attacker to tak...
PHPJabbers Time Slots Booking Calendar Security Vulnerability
PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers. A security vulnerability exists in PHPJabbers Time Slots Booking Calendar version v3.3, which stems from incorrect validation of the input of the password parameter, resulting in an insecure password...
PHPJabbers Time Slots Booking Calendar Security Vulnerability
PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers. A security vulnerability exists in PHPJabbers Time Slots Booking Calendar version v3.3, which originated from a vulnerability that allows an attacker to determine if a user is valid via user enumeration, leading to a brut...
