1050 matches found
CVE-2023-51333
The CVE-2023-51333 entry concerns PHPJabbers Cinema Booking System v1.0 and identifies a CSV Injection vulnerability stemming from insufficient input validation in the Languages section (Labels) of System Options, which is used to construct CSV exports. The vulnerability allows an attacker to cra...
CVE-2023-51331
PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...
PT-2025-7294 · Phpjabbers · Phpjabbers Car Park Booking System
Name of the Vulnerable Software and Affected Versions: PHPJabbers Car Park Booking System version 3.0 Description: The issue is related to a CSV injection vulnerability that allows an attacker to execute remote code. This vulnerability exists due to insufficient input validation in the Languages...
CVE-2023-51308
PHPJabbers Car Park Booking System v3.0 is affected by multiple HTML Injection vulnerabilities in parameters name, plugin_sms_api_key, plugin_sms_country_code, and title. Listed sources describe these as HTML injection, with PacketStorm noting stored XSS for v3.0 and ENISA/Red Hat records confirm...
PT-2025-7306 · Phpjabbers · Phpjabbers Shared Asset Booking System
Name of the Vulnerable Software and Affected Versions: PHPJabbers Shared Asset Booking System version 1.0 Description: The issue is related to a CSV injection vulnerability that allows an attacker to execute remote code. This vulnerability exists due to insufficient input validation in the...
CVE-2023-51334
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51315
Summary: CVE-2023-51315 affects PHPJabbers Restaurant Booking System v3.0. The vulnerability is described as multiple stored cross-site scripting (XSS) in the parameters: seat_name, plugin_sms_api_key, plugin_sms_country_code, title, and name. The connected sources confirm the product and the aff...
CVE-2023-51339
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51316
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51332
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Meeting Room Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51334
CVE-2023-51334 affects PHPJabbers Cinema Booking System v1.0, where the Forgot Password / reset mechanism lacks rate limiting. The documented impact is that an attacker can abuse the feature to trigger a large volume of email messages to a legitimate user, potentially causing a Denial of Service....
CVE-2023-51327
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51314
CVE-2023-51314 affects PHPJabbers Restaurant Booking System v3.0. The lack of rate limiting in the Forgot Password and Email Settings features allows an attacker to induce a high volume of outgoing emails for a legitimate user, potentially causing Denial of Service. The provided connected sources...
CVE-2023-51333
PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51325
CVE-2023-51325 affects PHPJabbers Shared Asset Booking System v1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) issue in the title and name parameters, allowing injected scripts to be permanently stored and later executed in the victim’s context. Public references in the PacketStorm ...
CVE-2023-51324
CVE-2023-51324 affects PHPJabbers Shared Asset Booking System v1.0. The vulnerability is a CSV injection flaw caused by insufficient input validation in the Languages section Labels/parameters field within System Options, which is used to build CSV exports. Exploitation could allow an attacker to...
CVE-2023-51321
CVE-2023-51321 describes a missing rate limit in the Forgot Password/Forgot Email flow of PHPJabbers Night Club Booking Software v1.0, enabling an attacker to trigger a high volume of email messages to a legitimate user and potentially cause a Denial of Service. The affected product is PHPJabbers...
CVE-2023-51336
PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...