Browse CVEs

MEDIUM 5.4 CVE-2023-40753 There is a Cross Site Scripting (XSS) vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2. Ticket Support Script Mitigation only Fix from $1,6002023-08-28 MEDIUM 6.1 CVE-2023-36313 PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting (XSS) via all post parameters of "Export Requests" aside from "request_feed". Document Creator Mitigation only Fix from $1,6002023-08-10 MEDIUM 6.1 CVE-2023-36314 There is a Cross Site Scripting (XSS) vulnerability in the value-text-o_sms_email_request_message parameters of index.php in PHPJabbers Callback Widg… Callback Widget Mitigation only Fix from $1,6002023-08-10 MEDIUM 6.1 CVE-2023-36315 There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0. Callback Widget Mitigation only Fix from $1,6002023-08-10 MEDIUM 5.4 CVE-2023-36312 There is a Cross Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php in PHPJabbers Callback Widget v1.0. Callback Widget Mitigation only Fix from $1,6002023-08-10 CRITICAL 9.8 CVE-2023-36311 There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0. Document Creator Mitigation only Fix from $2,3002023-08-10 MEDIUM 6.1 CVE-2023-36309 There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0. Document Creator Mitigation only Fix from $1,6002023-08-10 MEDIUM 6.1 CVE-2023-36310 There is a Cross Site Scripting (XSS) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0. Document Creator Mitigation only Fix from $1,6002023-08-10 CRITICAL 9.8 CVE-2023-39776 A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file. Ticket Support Script Mitigation only Fix from $2,3002023-08-10 HIGH 7.5 CVE-2023-38830 An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module. Yacht Listing Script Mitigation only Fix from $1,9502023-08-10 MEDIUM 6.5 CVE-2023-36136 PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to captur… Class Scheduling System Mitigation only Fix from $1,6002023-08-08 CRITICAL 9.8 CVE-2023-36139 In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote… Cleaning Business Software Mitigation only Fix from $2,3002023-08-04 MEDIUM 5.3 CVE-2023-36141 User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages… Cleaning Business Software Mitigation only Fix from $1,6002023-08-04 CRITICAL 9.8 CVE-2023-36132 PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control. Availability Booking Calendar No fix yet Fix from $2,3002023-08-04 CRITICAL 9.8 CVE-2023-36133 PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change. Availability Booking Calendar No fix yet Fix from $2,3002023-08-04 CRITICAL 9.8 CVE-2023-36134 In PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote a… Class Scheduling System Mitigation only Fix from $2,3002023-08-04 HIGH 7.5 CVE-2023-36135 User enumeration is found in in PHPJabbers Class Scheduling System v1.0. This issue occurs during password recovery, where a difference in messages c… Class Scheduling System Mitigation only Fix from $1,9502023-08-04 MEDIUM 6.1 CVE-2023-36137 There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Scheduling System 1.0. Class Scheduling System Mitigation only Fix from $1,6002023-08-04 MEDIUM 6.1 CVE-2023-36138 PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php. Cleaning Business Software Mitigation only Fix from $1,6002023-08-04 CRITICAL 9.8 CVE-2023-36131 PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password parameter. Availability Booking Calendar Mitigation only Fix from $2,3002023-08-04 MEDIUM 6.1 CVE-2023-4117 A vulnerability, which was classified as problematic, has been found in PHP Jabbers Rental Property Booking 2.0. Affected by this issue is some unkno… Rental Property Booking Calendar No fix yet Fix from $1,6002023-08-03 MEDIUM 6.1 CVE-2023-4116EPSS 8% A vulnerability classified as problematic was found in PHP Jabbers Taxi Booking 2.0. Affected by this vulnerability is an unknown functionality of th… Taxi Booking Script No fix yet Fix from $1,6002023-08-03 MEDIUM 6.1 CVE-2023-4114EPSS 8% A vulnerability was found in PHP Jabbers Night Club Booking Software 1.0. It has been rated as problematic. This issue affects some unknown processin… Night Club Booking Software No fix yet Fix from $1,6002023-08-03 MEDIUM 6.1 CVE-2023-4115EPSS 8% A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. Affected is an unknown function of the file /index.php… Cleaning Business Software No fix yet Fix from $1,6002023-08-03 MEDIUM 6.1 CVE-2023-4112EPSS 8% A vulnerability was found in PHP Jabbers Shuttle Booking Software 1.0. It has been classified as problematic. This affects an unknown part of the fil… Shuttle Booking Software No fix yet Fix from $1,6002023-08-03 MEDIUM 6.1 CVE-2023-4113EPSS 8% A vulnerability was found in PHP Jabbers Service Booking Script 1.0. It has been declared as problematic. This vulnerability affects unknown code of … Service Booking Script No fix yet Fix from $1,6002023-08-03 MEDIUM 6.1 CVE-2023-4111 A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionali… Bus Reservation System No fix yet Fix from $1,6002023-08-03 MEDIUM 6.1 CVE-2023-4110 A vulnerability has been found in PHP Jabbers Availability Booking Calendar 5.0 and classified as problematic. Affected by this vulnerability is an u… Availability Booking Calendar No fix yet Fix from $1,6002023-08-03 MEDIUM 6.1 CVE-2023-34869 PHPJabbers Catering System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /index.php?controller=pjAdmin&… Catering System Mitigation only Fix from $1,6002023-08-01 CRITICAL 9.8 CVE-2023-33561 Improper input validation of password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3 results in insecure passwords. Time Slots Booking Calendar Mitigation only Fix from $2,3002023-08-01