phpjabbers Vulnerability Advisory Catalog

Total 139 security vulnerabilities recorded for phpjabbers software and firmware.

← Back to All Vendors
Component: simple_cms

PHPJabbers Simple CMS 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through...

📅 2025-12-17
CVSS 5.4 Dossier →
CVE-2023-53926 CRITICAL
Component: simple_cms

PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote attackers to manipulate database queries...

📅 2025-12-17
CVSS 9.8 Dossier →
CVE-2023-53877 CRITICAL
Component: bus_reservation_system

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to manipulate database queries. Att...

📅 2025-12-15
CVSS 9.8 Dossier →
Component: restaurant_menu_maker

A weakness has been identified in PHPJabbers Restaurant Menu Maker up to 1.1. Affected by this issue is some unknown functionality of the file /previe...

📅 2025-09-23
CVSS 4.3 Dossier →
Component: cleaning_business_software

PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "c_name, name" parameters....

📅 2025-05-08
CVSS 5.4 Dossier →
Component: event_booking_calendar

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plug...

📅 2025-05-08
CVSS 6.5 Dossier →
Component: event_ticketing_system

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amount of ema...

📅 2025-02-20
CVSS 6.5 Dossier →
Component: meeting_room_booking_system

PHPJabbers Meeting Room Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters of index....

📅 2025-02-20
CVSS 5.4 Dossier →
Component: event_ticketing_system

PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in "lid" parameter in index....

📅 2025-02-20
CVSS 5.4 Dossier →
Component: meeting_room_booking_system

PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerab...

📅 2025-02-20
CVSS 8.8 Dossier →
Component: cinema_booking_system

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters....

📅 2025-02-20
CVSS 6.5 Dossier →
Component: cinema_booking_system

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of emai...

📅 2025-02-20
CVSS 5.3 Dossier →
Component: cinema_booking_system

PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability ...

📅 2025-02-20
CVSS 8.8 Dossier →
Component: meeting_room_booking_system

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Meeting Room Booking System v1.0 allows attackers to send an excessive amount o...

📅 2025-02-20
CVSS 4.3 Dossier →
Component: cleaning_business_software

PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerabi...

📅 2025-02-20
CVSS 6.5 Dossier →
Component: cinema_booking_system

PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Now Showing menu "date" parameter....

📅 2025-02-20
CVSS 5.4 Dossier →
Component: cleaning_business_software

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of...

📅 2025-02-20
CVSS 6.5 Dossier →
Component: cleaning_business_software

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of...

📅 2025-02-20
CVSS 6.5 Dossier →
Component: shared_asset_booking_system

PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters....

📅 2025-02-20
CVSS 5.4 Dossier →
Component: shared_asset_booking_system

PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerab...

📅 2025-02-20
CVSS 6.5 Dossier →
Component: shared_asset_booking_system

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking System v1.0 allows attackers to send an excessive amount o...

📅 2025-02-20
CVSS 6.5 Dossier →
Component: night_club_booking_software

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Night Club Booking Software v1.0 allows attackers to send an excessive amount o...

📅 2025-02-20
CVSS 6.5 Dossier →
Component: night_club_booking_software

PHPJabbers Night Club Booking Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerab...

📅 2025-02-20
CVSS 5.3 Dossier →
Component: bus_reservation_system

PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability...

📅 2025-02-20
CVSS 8.8 Dossier →
Page 1 of 6 (139 Total Records)