2 matches found
CVE-2023-43147: Cross-Site Request Forgery (CSRF)
PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery CSRF to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI...
8.8CVSS7.8AI score0.00486EPSS
SaveExploits1References2
CVE-2014-10001: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 conduct cross-site scripting XSS attacks via the i18n1name parameter in a pjActionCreate action to the...
6.8CVSS5.8AI score0.02264EPSS
SaveExploits2References2
20