11 matches found
EUVD-2023-56044
Malicious code in bioql PyPI...
CVE-2023-51325
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...
CVE-2023-51323
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
PT-2025-7305
Name of the Vulnerable Software and Affected Versions PHPJabbers Shared Asset Booking System version 1.0 Description A lack of rate limiting in the 'Forgot Password' feature allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS vi...
CVE-2023-51325: Improper Neutralization of Input During Web Page Generation
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...
CVE-2023-51324: Improper Control of Generation of Code
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...
CVE-2023-51323
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51323: Authentication Bypass by Spoofing
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
PT-2025-7307
Name of the Vulnerable Software and Affected Versions PHPJabbers Shared Asset Booking System version 1.0 Description The issue concerns Multiple Stored Cross-Site Scripting XSS in the title and name parameters. This allows for the storage and execution of malicious scripts, potentially leading to...
CVE-2023-51325
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...
PHPJabbers Shared Asset Booking System 1.0 CSV Injection
Exploit Title: PHPJabbers Shared Asset Booking System v1.0 - CSV Injection Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/shared-asset-booking-system/sectionDemo Version: v1.0 Test...