CVE-2023-4115

CVE-2023-4115 affects PHP Jabbers Cleaning Business 1.0. The vulnerability is an unauthenticated cross-site scripting via the index parameter in /index.php, enabling an attacker to craft a link that can steal session tokens or credentials. Public templates and reports describe reflected XSS in /i...

CVE-2023-51328

PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) within the c_name and name parameters. This vulnerability allows for the injection of malicious scripts, which could potentially lead to unauthorized actions on the affected system. As of the pr...

CVE-2023-51326

The PHPJabbers Cleaning Business Software v1.0 is vulnerable to a Denial of Service (DoS) attack due to a lack of rate limiting in the 'Forgot Password' feature. An attacker can exploit this to send an excessive volume of emails for a legitimate user, potentially exhausting resources or overwhelm...

CVE-2023-51331

PHPJabbers Cleaning Business Software v1.0 is vulnerable to a CSV Injection vulnerability. The root cause is insufficient input validation on the Languages section Labels any parameters field within the System Options , which is utilized to construct CSV files. This flaw can allow an attacker to ...

CVE-2023-36141

CVE-2023-36141 affects PHPJabbers Cleaning Business Software 1.0. The password-recovery path leaks whether a user exists via differing response messages, enabling brute-force attempts with valid users (CVSSv3.1 base 5.3; Network, Low attack complexity, No privileges, No user interaction). Remedia...

CVE-2023-51327

The PHPJabbers Cleaning Business Software v1.0 is vulnerable to a Denial of Service (DoS) due to a lack of rate limiting in the 'Forgot Password' feature. An attacker can exploit this by sending an excessive amount of emails for a legitimate user, triggering a large volume of generated messages. ...

CVE-2023-36140

CVE-2023-36140 affects PHPJabbers Cleaning Business Software 1.0. The root cause is that user passwords are not encrypted, enabling an attacker to access all user accounts. The entry carries a high-risk impact (CRITICAL, CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No remediation details are p...

CVE-2023-36138

CVE-2023-36138 affects PHPJabbers Cleaning Business Software 1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable through the theme parameter of preview.php. Root cause cited is unsanitized or improperly handled input in the theme parameter, leading to potential script injectio...

CVE-2023-36139

CVE-2023-36139 affects PHPJabbers Cleaning Business Software 1.0. The connected documents describe a vulnerability where the application lacks verification when changing an email address and/or password on the Profile Page, enabling remote attackers to take over accounts. The root cause is insuff...