CVE-2023-4115

CVE-2023-4115 affects PHP Jabbers Cleaning Business 1.0. The vulnerability is an unauthenticated cross-site scripting via the index parameter in /index.php, enabling an attacker to craft a link that can steal session tokens or credentials. Public templates and reports describe reflected XSS in /i...

CVE-2023-51328

PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the c_name and name parameters. Reported across multiple feeds, the issue enables stored XSS via input when creating or updating users, as shown in PacketStorm and other references. The root ...

CVE-2023-51331

CVE-2023-51331 affects PHPJabbers Cleaning Business Software v1.0. The vulnerability is a CSV Injection flaw that enables remote code execution by crafting a CSV payload via the Reservations list, specifically exploiting the Unique ID field used when exporting CSV data. Exploitation steps documen...

CVE-2023-36141

CVE-2023-36141 affects PHPJabbers Cleaning Business Software 1.0. The password-recovery path leaks whether a user exists via differing response messages, enabling brute-force attempts with valid users (CVSSv3.1 base 5.3; Network, Low attack complexity, No privileges, No user interaction). Remedia...

CVE-2023-51326

CVE-2023-51326 involves PHPJabbers Cleaning Business Software v1.0, where a lack of rate limiting in the Forgot Password/Email flow can allow an attacker to flood a legitimate user with email, producing a potential Denial of Service. The issue is documented with a CVSS v3.1 base score of 6.5 (Med...

CVE-2023-51327

The CVE-2023-51327 affects PHPJabbers Cleaning Business Software v1.0 where the Forgot Password feature lacks rate limiting. This allows an attacker to cause a DoS by sending a high volume of emails to a legitimate user, as stated in multiple sources. The root cause is unbounded request handling ...

CVE-2023-36140

CVE-2023-36140 affects PHPJabbers Cleaning Business Software 1.0. The root cause is that user passwords are not encrypted, enabling an attacker to access all user accounts. The entry carries a high-risk impact (CRITICAL, CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No remediation details are p...

CVE-2023-36138

CVE-2023-36138 affects PHPJabbers Cleaning Business Software 1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable through the theme parameter of preview.php. Root cause cited is unsanitized or improperly handled input in the theme parameter, leading to potential script injectio...

CVE-2023-36139

CVE-2023-36139 affects PHPJabbers Cleaning Business Software 1.0. The connected documents describe a vulnerability where the application lacks verification when changing an email address and/or password on the Profile Page, enabling remote attackers to take over accounts. The root cause is insuff...