CVE-2023-51324

The PHPJabbers Shared Asset Booking System v1.0 is vulnerable to a CSV Injection vulnerability. This flaw stems from insufficient input validation on the Labels any parameters field within the Languages section of System Options , which is used during the construction of CSV files. Exploitation o...

CVE-2023-51323

The PHPJabbers Shared Asset Booking System v1.0 is vulnerable to a Denial of Service (DoS) attack due to a lack of rate limiting in the 'Forgot Password' (or 'Forgot Email') feature. An attacker can exploit this by sending an excessive amount of reset requests for a legitimate user, which trigger...

CVE-2023-51325

PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) via the title and name parameters. This flaw allows an attacker to store and execute malicious scripts, which could lead to unauthorized access or data theft. As no patch is currently available...