Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/12 12:00 a.m.•1 views

CVE-2023-43147: Cross-Site Request Forgery (CSRF)

PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery CSRF to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI...

8.8CVSS7.8AI score0.00486EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/01/13 12:00 a.m.•3 views

CVE-2014-10001: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 conduct cross-site scripting XSS attacks via the i18n1name parameter in a pjActionCreate action to the...

6.8CVSS5.8AI score0.02264EPSS
SaveExploits2References2
Rows per page
Query Builder