Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
PhpjabbersShared Asset Booking System

3 matches found

CVE
CVE•added 2025/02/20 12:0 a.m.•54 views

CVE-2023-51324

CVE-2023-51324 affects PHPJabbers Shared Asset Booking System v1.0. The vulnerability is a CSV injection flaw caused by insufficient input validation in the Languages section Labels/parameters field within System Options, which is used to build CSV exports. Exploitation could allow an attacker to...

6.5CVSS6.7AI score0.00385EPSS
CVE
CVE•added 2025/02/20 12:0 a.m.•53 views

CVE-2023-51323

CVE-2023-51323 concerns PHPJabbers Shared Asset Booking System v1.0, where a missing rate-limit in the Forgot Password/Email flow can allow an attacker to trigger a flood of email messages for a legitimate user, potentially causing a DoS. The issue is described in public writeups (e.g., PacketSto...

6.5CVSS6.4AI score0.00358EPSS
CVE
CVE•added 2025/02/20 12:0 a.m.•49 views

CVE-2023-51325

CVE-2023-51325 affects PHPJabbers Shared Asset Booking System v1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) issue in the title and name parameters, allowing injected scripts to be permanently stored and later executed in the victim’s context. Public references in the PacketStorm ...

5.4CVSS5.2AI score0.0039EPSS