phpjabbers Vulnerability Advisory Catalog

Total 139 security vulnerabilities recorded for phpjabbers software and firmware.

← Back to All Vendors
Component: bus_reservation_system

PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters....

📅 2025-02-20
CVSS 5.4 Dossier →
Component: restaurant_booking_system

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, p...

📅 2025-02-20
CVSS 6.5 Dossier →
Component: bus_reservation_system

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows attackers to send an excessive amount of ema...

📅 2025-02-20
CVSS 7.5 Dossier →
Component: restaurant_booking_system

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "seat_name, plugin_sms_api_key, plugin_sm...

📅 2025-02-20
CVSS 5.4 Dossier →
Component: restaurant_booking_system

A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Restaurant Booking System v3.0 allows attackers to send an ex...

📅 2025-02-20
CVSS 7.5 Dossier →
Component: restaurant_booking_system

PHPJabbers Restaurant Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerabil...

📅 2025-02-20
CVSS 8.8 Dossier →
Component: restaurant_booking_system

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Reservations menu, Schedule section date parameter....

📅 2025-02-20
CVSS 5.4 Dossier →
Component: car_park_booking_system

PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerabilit...

📅 2025-02-20
CVSS 8.8 Dossier →
Component: car_park_booking_system

A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an exce...

📅 2025-02-20
CVSS 4.3 Dossier →
Component: car_park_booking_system

A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of ema...

📅 2025-02-20
CVSS 4.3 Dossier →
Component: car_park_booking_system

PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plu...

📅 2025-02-20
CVSS 6.1 Dossier →
Component: event_ticketing_system

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "name, title" parameters....

📅 2025-02-20
CVSS 5.4 Dossier →
Component: event_ticketing_system

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, plugin_sms_api_key, plugin_sms_country_code, title,...

📅 2025-02-19
CVSS 6.1 Dossier →
Component: hotel_booking_system

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability e...

📅 2025-02-19
CVSS 8.8 Dossier →
Component: hotel_booking_system

A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amo...

📅 2025-02-19
CVSS 7.5 Dossier →
Component: hotel_booking_system

PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting (XSS) vulnerabilities in the "name, plugin_sms_api_key, plugin_sms_country_...

📅 2025-02-19
CVSS 6.1 Dossier →
Component: hotel_booking_system

PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_...

📅 2025-02-19
CVSS 6.1 Dossier →
Component: event_booking_calendar

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability...

📅 2025-02-19
CVSS 4.7 Dossier →
Component: hotel_booking_system

A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email ...

📅 2025-02-19
CVSS 6.5 Dossier →
Component: event_booking_calendar

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code, title, p...

📅 2025-02-19
CVSS 6.1 Dossier →
Component: event_booking_calendar

A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an exces...

📅 2025-02-19
CVSS 7.5 Dossier →
CVE-2024-57430 CRITICAL
Component: cinema_booking_system

An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database querie...

📅 2025-02-06
CVSS 9.8 Dossier →
Component: cinema_booking_system

A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to e...

📅 2025-02-06
CVSS 5.4 Dossier →
CVE-2024-57428 CRITICAL
Component: cinema_booking_system

A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields (even...

📅 2025-02-06
CVSS 9.3 Dossier →
Page 2 of 6 (139 Total Records)