CVE-2023-51339

CVE-2023-51339 affects PHPJabbers Event Ticketing System v1.0. The root cause is a lack of rate limiting in the Forgot Password/Forgot Email flow, enabling an attacker to generate a large volume of e-mails to a legitimate user and cause a DoS. Documents describe the vulnerability and an exploit e...

CVE-2023-51337

Vulnerability summary (CVE-2023-51337) : PHPJabbers Event Ticketing System v1.0 is vulnerable to a Reflected Cross-Site Scripting (XSS) in the lid parameter of index . The CVSS v3.1 base score is 5.4 (Medium) with attack vector Network , requiring Low privileges and User interaction . Impact is l...

CVE-2023-51306

CVE-2023-51306 affects PHPJabbers Event Ticketing System v1.0 and is described as a Stored Cross-Site Scripting (XSS) vulnerability in the name and title parameters. The issue is documented across multiple sources confirming the vulnerability, with exploitation details (e.g., affected parameters)...

CVE-2023-51303

PHPJabbers Event Ticketing System v1.0 is affected by a Multiple HTML Injection (XSS) in parameters lid, name, plugin_sms_api_key, plugin_sms_country_code, and title. Root cause is HTML injection in those fields; impact described as potential HTML code execution in affected pages. Remediation sta...