CVE-2023-4114

PHP Jabbers Night Club Booking Software 1.0 is affected by a Cross Site Scripting vulnerability in the index parameter of /index.php. Multiple connected sources (Nuclei template, CVE-2023-4114 entries, Exploit-DB and related vendor pages) confirm that manipulating index can inject script, enablin...

CVE-2023-51321

CVE-2023-51321 describes a missing rate limit in the Forgot Password/Forgot Email flow of PHPJabbers Night Club Booking Software v1.0, enabling an attacker to trigger a high volume of email messages to a legitimate user and potentially cause a Denial of Service. The affected product is PHPJabbers...

CVE-2023-51320

CVE-2023-51320 affects PHPJabbers Night Club Booking Software v1.0. The vulnerability is a CSV Injection in the CSV export, caused by insufficient input validation on the Languages → Labels parameter (in System Options) used to construct the CSV file. The issue is evidenced by concrete exploitati...