1050 matches found
PT-2023-27622 · Phpjabbers · Phpjabbers Food Delivery Script
Name of the Vulnerable Software and Affected Versions: PHPJabbers Food Delivery Script version 3.1 Description: The issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid user...
CVE-2023-40767
User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-40756
User enumeration is found in PHPJabbers Callback Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
PT-2023-27617 · Phpjabbers · Phpjabbers Make An Offer Widget
Name of the Vulnerable Software and Affected Versions: PHPJabbers Make an Offer Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the action parameter of the "index.php" file. This allows for potential malicious script execution. Recommendations: For PHPJabbers Make an...
CVE-2023-40748
CVE-2023-40748 affects PHPJabbers Food Delivery Script 3.0. The NVD and nuclei data confirm a SQL injection in the q parameter of index.php, enabling unauthorized database access. Root cause: improper sanitization in the q parameter leading to SQLi (CWE-89). Impact notes in sources indicate attac...
CVE-2023-40761
User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
Restaurant Booking Script 安全漏洞
Restaurant Booking Script is a restaurant reservation system. A security vulnerability exists in PHPJabbers Restaurant Booking Script version v3.0, which stems from a user enumeration vulnerability during password reset...
CVE-2023-40757
The CVE-2023-40757 entry concerns PHPJabbers Food Delivery Script v3.1. The vulnerability is a user-enumeration flaw in the password-recovery flow: an attacker can distinguish between valid and invalid usernames based on response messages, enabling brute-forcing valid user accounts. Affected soft...
CVE-2023-40757
User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-40755
There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Callback Widget v1.0...
CVE-2023-40756
PHPJabbers Callback Widget v1.0 is affected by a user-enumeration vulnerability during password recovery, where differing response messages may reveal whether a user exists, enabling brute-force attempts with valid accounts. The NVD lists CVSS 3.1 base score 9.8 (CRITICAL) with network attack vec...
PHPJabbers Callback Widget 跨站脚本漏洞
PHPJabbers Callback Widget is a simple PHP script that places a discreet callback button on a website. A security vulnerability exists in PHPJabbers Callback Widget that stems from a cross-site scripting vulnerability in the theme parameter of preview.php...
CVE-2023-40758
User enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
PT-2023-27616 · Phpjabbers · Phpjabbers Fundraising Script
Name of the Vulnerable Software and Affected Versions: PHPJabbers Fundraising Script version 1.0 Description: The issue is related to Cross Site Scripting XSS via the action parameter of "index.php". This allows for potential malicious script execution. The estimated number of potentially affecte...
Yacht Listing Script 跨站脚本漏洞
Yacht Listing Script is yacht and boat categorization software. A security vulnerability exists in PHPJabbers Yacht Listing Script v1.0, which is caused by a cross-site scripting vulnerability in the "action" parameter of the index.php file...
CVE-2023-40761
CVE-2023-40761 affects PHPJabbers Yacht Listing Script v2.0, where a password-recovery message difference allows user enumeration. An attacker could determine if a username exists, enabling brute-force attempts with valid users. The issue is documented across multiple sources (e.g., Red Hat, NVD/...
CVE-2023-40755
CVE-2023-40755 affects PHPJabbers Callback Widget v1.0, with an XSS vulnerability in the theme parameter of preview.php. The issue allows unauthenticated attackers to inject JavaScript through theme, potentially stealing administrator credentials or manipulating callback requests. The root cause ...
CVE-2023-40753
There is a Cross Site Scripting XSS vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2...