1050 matches found
CVE-2023-36141
User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
PHPJabbers Taxi Booking 2.0 Cross Site Scripting
Exploit Title: PHPJabbers Taxi Booking 2.0 - Reflected XSS Exploit Author: CraCkEr Date: 22/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/taxi-booking-script/ Tested on: Windows 10 Pro Impact: Manipulate the content of the site...
CVE-2023-36139
In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...
PT-2023-25448 · Phpjabbers · Phpjabbers Cleaning Business
Name of the Vulnerable Software and Affected Versions: PHPJabbers Cleaning Business Software version 1.0 Description: The issue is related to Cross Site Scripting XSS via the theme parameter of the "preview.php" endpoint. This allows for potential malicious script injection. No information is...
CVE-2023-36141
CVE-2023-36141 affects PHPJabbers Cleaning Business Software 1.0. The password-recovery path leaks whether a user exists via differing response messages, enabling brute-force attempts with valid users (CVSSv3.1 base 5.3; Network, Low attack complexity, No privileges, No user interaction). Remedia...
CVE-2023-36133
CVE-2023-36133 affects PHPJabbers Availability Booking Calendar 5.0. Descriptions across sources consistently flag a User Account Takeover via username/password changes, with CVSS v3.1 metrics indicating network access, low attack complexity, no privileges required, and high confidentiality, inte...
PHPJabbers Night Club Booking 1.0 Cross Site Scripting
Exploit Title: PHPJabbers Night Club Booking 1.0 - Reflected XSS Exploit Author: CraCkEr Date: 21/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/night-club-booking-software/ Tested on: Windows 10 Pro Impact: Manipulate the content...
CVE-2023-36135
The CVE-2023-36135 issue affects PHPJabbers Class Scheduling System v1.0. During password recovery, a difference in responses between valid and invalid usernames enables user enumeration, which can facilitate brute-forcing existing accounts. The NVD entry and related sources confirm the affected ...
CVE-2023-36135
User enumeration is found in in PHPJabbers Class Scheduling System v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...
CVE-2023-36139
In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...
PHPJabbers Cleaning Business Software Data Forgery Issue Vulnerability
Cleaning Business Software is an open source cleaning business software from PHPJabbers. A security vulnerability exists in version 1.0 of PHPJabbers Cleaning Business Software that stems from a lack of authentication when changing e-mail addresses and/or passwords, allowing a remote attacker to...
CVE-2023-36137
There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Scheduling System 1.0...
PT-2023-25447 · Phpjabbers · Phpjabbers Class Scheduling System
Name of the Vulnerable Software and Affected Versions: PHPJabbers Class Scheduling System version 1.0 Description: The issue is related to a Cross Site Scripting XSS vulnerability. This vulnerability is found in the theme parameter of the "preview.php" file. Recommendations: For PHPJabbers Class...
PHPJabbers Service Booking Script 1.0 Cross Site Scripting
Exploit Title: PHPJabbers Service Booking Script 1.0 - Reflected XSS Exploit Author: CraCkEr Date: 21/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/service-booking-script/ Tested on: Windows 10 Pro Impact: Manipulate the content ...
PT-2023-25445 · Phpjabbers · Phpjabbers Class Scheduling System
Name of the Vulnerable Software and Affected Versions: PHPJabbers Class Scheduling System version 1.0 Description: The issue is related to user enumeration, which occurs during the password recovery process. A difference in messages could allow an attacker to determine if a user is valid or not,...
PHPJabbers Availability Booking Calendar 5.0 Cross Site Scripting
Exploit Title: PHPJabbers Availability Booking Calendar 5.0 - Reflected XSS Exploit Author: CraCkEr Date: 20/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/availability-booking-calendar/ Tested on: Windows 10 Pro Impact: Manipulat...
CVE-2023-36131
PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password parameter...
PHPJabbers Cleaning Business 1.0 Cross Site Scripting
Exploit Title: PHPJabbers Cleaning Business 1.0 - Reflected XSS Exploit Author: CraCkEr Date: 21/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/cleaning-business-software/ Tested on: Windows 10 Pro Impact: Manipulate the content o...
PHPJabbers Bus Reservation System 1.1 SQL Injection
Exploit Title: PHPJabbers Bus Reservation System 1.1 - SQL Injection Exploit Author: CraCkEr Date: 20/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/bus-reservation-system/ Tested on: Windows 10 Pro Impact: Database Access CVE:...