CVE-2023-36312

There is a Cross Site Scripting XSS vulnerability in the value-enum-obfincludetimezone parameter of index.php in PHPJabbers Callback Widget v1.0...

CVE-2023-36315

The CVE CVE-2023-36315 affects PHPJabbers Callback Widget v1.0, specifically an XSS in the action parameter of index.php. Root cause: improper handling of input in the action parameter leading to cross-site scripting. Impact is described as XSS; exploitation status is not provided in the document...

PHPJabbers Document Creator Cross-Site Scripting Vulnerability

PHPJabbers Document Creator is PHPJabbers open source a document creator . A cross-site scripting vulnerability exists in PHPJabbers Document Creator v1.0, which stems from cross-site scripting XSS in the action parameter of ndex.php...

CVE-2023-36309

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0...

PHPJabbers Document Creator SQL Injection Vulnerability

PHPJabbers Document Creator is a PHPJabbers open source document creator. A security vulnerability exists in PHPJabbers Document Creator v1.0, which stems from an SQL injection in the column parameter of ndex.php...

CVE-2023-39776

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-36312

There is a Cross Site Scripting XSS vulnerability in the value-enum-obfincludetimezone parameter of index.php in PHPJabbers Callback Widget v1.0...

PT-2023-27102 · Phpjabbers · Phpjabbers Ticket Support Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Ticket Support Script version 3.2 Description: A File Upload issue allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For PHPJabbers Ticket Support Script version 3.2, consider disabling file...

CVE-2023-36314

CVE-2023-36314 describes a Cross Site Scripting (XSS) vulnerability in PHPJabbers Callback Widget v1.0, specifically in the value-text-o_sms_email_request_message parameter of index.php. Connected documents confirm the affected product and vulnerable parameter. No exploitation details are provide...

CVE-2023-36311

CVE-2023-36311: SQL injection in the PHPJabbers Document Creator v1.0, triggered by the column parameter of index.php. Affects PHPJabbers Document Creator; root cause is unsafely handled SQL in the column param. Documented references indicate high risk (NVD/Red Hat entries) with no explicit explo...

CVE-2023-36313

PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting XSS via all post parameters of "Export Requests" aside from "requestfeed"...

PHPJabbers Document Creator Cross-Site Scripting Vulnerability

PHPJabbers Document Creator is PHPJabbers open source a document creator . A cross-site scripting vulnerability exists in PHPJabbers Document Creator v1.0, which originates from cross-site scripting XSS in the post parameter of ndex.php...

CVE-2023-36313

PHPJabbers Document Creator v1.0 is reported vulnerable to Cross Site Scripting (XSS) via all post parameters of the Export Requests action, excluding request_feed. Affected component is the Document Creator’s web interface handling export requests; root cause is unvalidated/unsanitized input in ...

PHPJabbers Callback Widget Cross-Site Scripting Vulnerability

PHPJabbers Callback Widget is a simple PHP script that places a discreet callback button on a website. A cross-site scripting vulnerability exists in PHPJabbers Callback Widget version v1.0, which stems from cross-site scripting XSS in the action parameter of ndex.php...

CVE-2023-36309

CVE-2023-36309 affects PHPJabbers Document Creator v1.0, with a Cross-Site Scripting (XSS) flaw in the action parameter of index.php. The issue is documented across multiple sources (NVD, Red Hat, CVE lists) with the vulnerability described as XSS in the action parameter, but concrete exploit det...

PT-2023-25526 · Phpjabbers · Phpjabbers Document Creator

Name of the Vulnerable Software and Affected Versions: PHPJabbers Document Creator version 1.0 Description: There is a Cross Site Scripting XSS issue in the column parameter of "index.php" in PHPJabbers Document Creator. Recommendations: For PHPJabbers Document Creator version 1.0, avoid using th...

CVE-2023-38830

An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module...

CVE-2023-36309

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0...

CVE-2023-36315

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0...

CVE-2023-39776

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...