1050 matches found
CVE-2023-36311
There is a SQL injection SQLi vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...
CVE-2023-38830
The CVE describes an information leak in PHPJabbers Yacht Listing Script v1.0 that allows exporting clients’ credit card numbers from the Reservations module. The affected software is PHPJabbers Yacht Listing Script (version 1.0). The vulnerability is described as an information disclosure flaw (...
PT-2023-25524 · Phpjabbers · Phpjabbers Document Creator
Name of the Vulnerable Software and Affected Versions: PHPJabbers Document Creator version 1.0 Description: There is a Cross Site Scripting XSS issue in the action parameter of "index.php" in PHPJabbers Document Creator. This allows for potential malicious script execution. Recommendations: For...
CVE-2023-36314
There is a Cross Site Scripting XSS vulnerability in the value-text-osmsemailrequestmessage parameters of index.php in PHPJabbers Callback Widget v1.0...
CVE-2023-36312
PHPJabbers Callback Widget v1.0 contains a Cross-Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php. The root cause is improper handling of user-controlled input in this parameter, enabling script execution in the browser. The issue is identified acr...
CVE-2023-36310
Summary (CVE-2023-36310): A cross-site scripting (XSS) vulnerability exists in PHPJabbers Document Creator v1.0, specifically in the column parameter of index.php. The root cause is unvalidated input in the column parameter leading to script execution. The NVD entry rates it as CVSS v3.1 base sco...
PHPJabbers Vacation Rental Script 4.0 Cross Site Request Forgery
Exploit Title: PHPJabbers Vacation Rental Script 4.0 - CSRF Date: 05/08/2023 Exploit Author: Hasan Ali YILDIR Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/vacation-rental-script/ Version: 4.0 Tested on: Windows 10 Pro Description The attacker can send to...
CVE-2023-36136
PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account update user page allowing an attacker to capture all user names and passwords in clear text...
CVE-2023-36136
PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account update user page allowing an attacker to capture all user names and passwords in clear text...
CVE-2023-36136
PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account update user page allowing an attacker to capture all user names and passwords in clear text...
CVE-2023-36136
The CVE affects PHPJabbers Class Scheduling System 1.0. The issue is that password handling on the update user page lacks encryption, allowing an attacker to capture all usernames and passwords in clear text. This directly impacts confidentiality and enables credential exposure without requiring ...
PT-2023-25446 · Phpjabbers · Phpjabbers Class Scheduling System
Name of the Vulnerable Software and Affected Versions: PHPJabbers Class Scheduling System version 1.0 Description: The issue is related to a lack of encryption on passwords when editing a user account, specifically on the update user page. This allows an attacker to capture all user names and...
PHPJabbers Vacation Rental Script 4.0 - CSRF Vulnerability
Exploit Title: PHPJabbers Vacation Rental Script 4.0 - CSRF Exploit Author: Hasan Ali YILDIR Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/vacation-rental-script/ Version: 4.0 Tested on: Windows 10 Pro Description The attacker can send to victim a link...
CVE-2023-36136
PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account update user page allowing an attacker to capture all user names and passwords in clear text...
Cleaning Business Software Cross-Site Scripting Vulnerability
Cleaning Business Software is PHPJabbers open source a cleaning business software. Cleaning Business Software v1.0 version of the existence of cross-site scripting vulnerabilities , the vulnerability stems from the file / index.php parameter index of the user-supplied data lack of effective...
CVE-2023-36141
User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-36139
In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...
CVE-2023-36139
In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...