Cross site scripting

There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-38830

An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module...

CVE-2023-39776

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-38830

An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module...

CVE-2023-39776

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-39776

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...

Information disclosure

An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module...

CVE-2023-36315

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0...

CVE-2023-36311

There is a SQL injection SQLi vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-38830

An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module...

CVE-2023-36313

PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting XSS via all post parameters of "Export Requests" aside from "requestfeed"...

CVE-2023-36314

There is a Cross Site Scripting XSS vulnerability in the value-text-osmsemailrequestmessage parameters of index.php in PHPJabbers Callback Widget v1.0...

Callback Widget Cross-Site Scripting Vulnerability

PHPJabbers Callback Widget is a simple PHP script that places a discreet callback button on a website. A cross-site scripting vulnerability exists in PHPJabbers Callback Widget version v1.0, which stems from cross-site scripting XSS in the value-text-osmsemailrequestmessage parameter of ndex.php...

PHPJabbers Callback Widget Cross-Site Scripting Vulnerability

PHPJabbers Callback Widget is a simple PHP script that places a discreet callback button on a website. A cross-site scripting vulnerability exists in PHPJabbers Callback Widget version v1.0, which stems from cross-site scripting XSS in the value-enum-obfincludetimezone parameter of ndex.php...

PHPJabbers Document Creator Cross-Site Scripting Vulnerability

PHPJabbers Document Creator is a PHPJabbers open source document creator. A cross-site scripting vulnerability exists in PHPJabbers Document Creator v1.0, which stems from cross-site scripting XSS in the column parameter of ndex.php...

CVE-2023-36310

There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36310

There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-39776

The CVE-2023-39776 entry concerns PHPJabbers Ticket Support Script v3.2 with a File Upload vulnerability that allows an attacker to execute arbitrary code by uploading a crafted file. Documents consistently identify the affected product and version, and cite an unrestricted file upload root cause...

PT-2023-25528 · Phpjabbers · Phpjabbers Callback Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Callback Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the value-enum-o bf include timezone parameter of index.php. This allows for potential malicious script execution. Recommendations: For PHPJabber...

PT-2023-25530 · Phpjabbers · Phpjabbers Callback Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Callback Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the value-text-o sms email request message parameters of index.php. This allows for potential malicious script execution. Recommendations: For...