CVE-2023-51339

The PHPJabbers Event Ticketing System v1.0 is vulnerable to a Denial of Service (DoS) attack due to a lack of rate limiting in the 'Forgot Password' (or 'Forgot Email') feature. This flaw allows an attacker to trigger an excessive amount of reset requests for a legitimate user, resulting in a lar...

CVE-2023-51337

The PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) and HTML Injection . The vulnerability exists in the "lid" parameter on the index page. An attacker can inject malicious code into a web page viewed by other users, which may lead to stealing sensitiv...

CVE-2023-51303

The PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection (also known as HTML code injection or cross-site scripting) via the lid, name, plugin_sms_api_key, plugin_sms_country_code, and title parameters. This vulnerability allows an attacker to inject malicious code into...

CVE-2023-51306

The PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) . The vulnerability exists in the "name" and "title" parameters, which lack proper neutralization of input during web page generation. This flaw allows an attacker to inject malicious code into ...