CVE-2023-4111

PHP Jabbers Bus Reservation System 1.1 has a cross-site scripting vulnerability in /index.php via the pickup_id (and related index parameter) that can be exploited remotely. Multiple connected sources identify the issue as RXSS/REFLECTED XSS in the index.php endpoint, affecting the file’s handlin...

CVE-2023-51316

The PHPJabbers Bus Reservation System v1.1 is vulnerable to a Denial of Service (DoS) attack due to a lack of rate limiting in the "Forgot Password" feature. Attackers can exploit this to trigger an excessive amount of emails for a legitimate user, causing uncontrolled resource consumption . To m...

CVE-2023-51318

PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) . The issue is caused by improper neutralization of input in the "title" and "name" parameters, which allows malicious scripts to be stored and executed when users access the affected pages. As a te...

CVE-2023-51319

The PHPJabbers Bus Reservation System v1.1 is susceptible to a CSV Injection vulnerability. The root cause is insufficient input validation on the Labels any parameters field within the Languages section of the System Options , which is used to construct CSV files. This flaw can allow an attacker...

CVE-2023-53877

CVE-2023-53877 affects Bus Reservation System 1.1. The vulnerability is a SQL injection in the pickup_id parameter, enabling attackers to manipulate database queries. Techniques cited: boolean-based , error-based , and time-based blind SQL injection to steal information from the database. Practic...