49 matches found
CVE-2026-31798
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v4.10.16-lts, JumpServer improperly validates certificates in the Custom SMS API Client. When JumpServer sends MFA/OTP codes via Custom SMS API, an attacker can intercept the request and...
CVE-2026-31798
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v4.10.16-lts, JumpServer improperly validates certificates in the Custom SMS API Client. When JumpServer sends MFA/OTP codes via Custom SMS API, an attacker can intercept the request and...
EUVD-2026-12081
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v4.10.16-lts, JumpServer improperly validates certificates in the Custom SMS API Client. When JumpServer sends MFA/OTP codes via Custom SMS API, an attacker can intercept the request and...
PT-2026-25359
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v4.10.16-lts, JumpServer improperly validates certificates in the Custom SMS API Client. When JumpServer sends MFA/OTP codes via Custom SMS API, an attacker can intercept the request and...
CVE-2026-31798: Improper Certificate Validation
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v4.10.16-lts, JumpServer improperly validates certificates in the Custom SMS API Client. When JumpServer sends MFA/OTP codes via Custom SMS API, an attacker can intercept the request and...
EUVD-2023-52856
Malicious code in bioql PyPI...
EUVD-2023-52869
Malicious code in bioql PyPI...
EUVD-2023-52868
Malicious code in bioql PyPI...
CVE-2023-48837
Car Rental Script 3.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code...
CVE-2023-48825
Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code...
CVE-2023-51315
PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "seatname, pluginsmsapikey, pluginsmscountrycode, title, name" parameters...
PT-2025-7298
Name of the Vulnerable Software and Affected Versions PHPJabbers Restaurant Booking System version 3.0 Description The issue concerns multiple Stored Cross-Site Scripting XSS vulnerabilities in the parameters seat name, plugin sms api key, plugin sms country code, title, and name. This allows for...
CVE-2023-51300
PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting XSS vulnerabilities in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey" parameters...
PT-2025-7281
Name of the Vulnerable Software and Affected Versions PHPJabbers Event Booking Calendar version 4.0 Description The issue concerns a Cross-Site Scripting XSS vulnerability that affects the "name", plugin sms api key, plugin sms country code, and "title" parameters. This allows attackers to execut...
PT-2025-7285
Name of the Vulnerable Software and Affected Versions PHPJabbers Hotel Booking System version 4.0 Description The PHPJabbers Hotel Booking System is affected by Cross-Site Scripting XSS vulnerabilities in the name, plugin sms api key, plugin sms country code, and title parameters. This issue allo...
PT-2025-7288 · Phpjabbers · Phpjabbers Event Ticketing System
Name of the Vulnerable Software and Affected Versions: PHPJabbers Event Ticketing System version 1.0 Description: The PHPJabbers Event Ticketing System is vulnerable to multiple HTML injections in the parameters lid, name, plugin sms api key, plugin sms country code, and title. This issue allows...
PT-2025-7289
Name of the Vulnerable Software and Affected Versions PHPJabbers Car Park Booking System version 3.0 Description The issue concerns Multiple Stored Cross-Site Scripting XSS in the parameters name, plugin sms api key, plugin sms country code, and title. This allows for the potential execution of...
PT-2025-7284
Name of the Vulnerable Software and Affected Versions PHPJabbers Hotel Booking System version 4.0 Description The issue concerns HTML Injection in the name, plugin sms api key, plugin sms country code, and title parameters. This allows for the injection of malicious HTML code, potentially leading...
