1050 matches found
CVE-2023-51327
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51325
CVE-2023-51325 affects PHPJabbers Shared Asset Booking System v1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) issue in the title and name parameters, allowing injected scripts to be permanently stored and later executed in the victim’s context. Public references in the PacketStorm ...
CVE-2023-51339
CVE-2023-51339 affects PHPJabbers Event Ticketing System v1.0. The root cause is a lack of rate limiting in the Forgot Password/Forgot Email flow, enabling an attacker to generate a large volume of e-mails to a legitimate user and cause a DoS. Documents describe the vulnerability and an exploit e...
CVE-2023-51319
The CVE-2023-51319 issue affects PHPJabbers Bus Reservation System v1.1. The vulnerability arises from insufficient input validation in the Languages section (Labels) within System Options, which is used to construct CSV files. This CSV injection can be triggered when exporting data, enabling an ...
CVE-2023-51335
CVE-2023-51335 affects PHPJabbers Cinema Booking System v1.0. The issue is a stored Cross-Site Scripting (XSS) vulnerability in the title and name parameters, as described in multiple sources (NVD entry with CVSS v3.1 base score 6.5; related vendor and security pages). The root cause is not expan...
CVE-2023-51326
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51330
PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in Now Showing menu "date" parameter...
CVE-2023-51326
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51333
PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51324
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...
CVE-2023-51321
CVE-2023-51321 describes a missing rate limit in the Forgot Password/Forgot Email flow of PHPJabbers Night Club Booking Software v1.0, enabling an attacker to trigger a high volume of email messages to a legitimate user and potentially cause a Denial of Service. The affected product is PHPJabbers...
CVE-2023-51338
CVE-2023-51338 affects PHPJabbers Meeting Room Booking System v1.0. The vulnerability is a Multiple Stored Cross-Site Scripting (XSS) in the index.php page, specifically in the title and name parameters. The root cause, per the packetstorm exploit details, is storing malicious scripts entered int...
CVE-2023-51312
CVE-2023-51312 affects PHPJabbers Restaurant Booking System v3.0, with a reflected Cross-Site Scripting (XSS) flaw in the Reservations menu and the Schedule date parameter. The underlying issue is untrusted input reflected in HTML/JavaScript contexts, enabling arbitrary script execution. Public e...
CVE-2023-51318
CVE-2023-51318 affects PHPJabbers Bus Reservation System v1.1. The vulnerability is described as Multiple Stored Cross-Site Scripting (XSS) in the title and name parameters. Public references (e.g., PacketStorm) provide an exploit narrative showing stored XSS behavior when adding a user with craf...
CVE-2023-51331
CVE-2023-51331 affects PHPJabbers Cleaning Business Software v1.0. The vulnerability is a CSV Injection flaw that enables remote code execution by crafting a CSV payload via the Reservations list, specifically exploiting the Unique ID field used when exporting CSV data. Exploitation steps documen...
CVE-2023-51306
PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "name, title" parameters...
CVE-2023-51310
A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51324
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...
CVE-2023-51319
PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...