phpjabbers Vulnerability Advisory Catalog

Total 139 security vulnerabilities recorded for phpjabbers software and firmware.

← Back to All Vendors
Component: callback_widget

There is a Cross Site Scripting (XSS) vulnerability in the value-text-o_sms_email_request_message parameters of index.php in PHPJabbers Callback Widge...

📅 2023-08-10
CVSS 6.1 Dossier →
Component: document_creator

PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting (XSS) via all post parameters of "Export Requests" aside from "request_feed"....

📅 2023-08-10
CVSS 6.1 Dossier →
Component: callback_widget

There is a Cross Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php in PHPJabbers Callback Widget v1.0....

📅 2023-08-10
CVSS 5.4 Dossier →
CVE-2023-36311 CRITICAL
Component: document_creator

There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0....

📅 2023-08-10
CVSS 9.8 Dossier →
Component: document_creator

There is a Cross Site Scripting (XSS) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0....

📅 2023-08-10
CVSS 6.1 Dossier →
Component: document_creator

There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0....

📅 2023-08-10
CVSS 6.1 Dossier →
CVE-2023-39776 CRITICAL
Component: ticket_support_script

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file....

📅 2023-08-10
CVSS 9.8 Dossier →
Component: yacht_listing_script

An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module....

📅 2023-08-10
CVSS 7.5 Dossier →
Component: class_scheduling_system

PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture...

📅 2023-08-08
CVSS 6.5 Dossier →
Component: cleaning_business_software

User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages ...

📅 2023-08-04
CVSS 5.3 Dossier →
CVE-2023-36139 CRITICAL
Component: cleaning_business_software

In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote ...

📅 2023-08-04
CVSS 9.8 Dossier →
Component: cleaning_business_software

PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php....

📅 2023-08-04
CVSS 6.1 Dossier →
Component: class_scheduling_system

There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Scheduling System 1.0....

📅 2023-08-04
CVSS 6.1 Dossier →
Component: class_scheduling_system

User enumeration is found in in PHPJabbers Class Scheduling System v1.0. This issue occurs during password recovery, where a difference in messages co...

📅 2023-08-04
CVSS 7.5 Dossier →
CVE-2023-36134 CRITICAL
Component: class_scheduling_system

In PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote at...

📅 2023-08-04
CVSS 9.8 Dossier →
CVE-2023-36133 CRITICAL
Component: availability_booking_calendar

PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change....

📅 2023-08-04
CVSS 9.8 Dossier →
CVE-2023-36132 CRITICAL
Component: availability_booking_calendar

PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control....

📅 2023-08-04
CVSS 9.8 Dossier →
CVE-2023-36131 CRITICAL
Component: availability_booking_calendar

PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password parameter....

📅 2023-08-04
CVSS 9.8 Dossier →
CVE-2023-4117 MEDIUM
Component: rental_property_booking_calendar

A vulnerability, which was classified as problematic, has been found in PHP Jabbers Rental Property Booking 2.0. Affected by this issue is some unknow...

📅 2023-08-03
CVSS 4.3 Dossier →
CVE-2023-4116 MEDIUM
Component: taxi_booking_script

A vulnerability classified as problematic was found in PHP Jabbers Taxi Booking 2.0. Affected by this vulnerability is an unknown functionality of the...

📅 2023-08-03
CVSS 4.3 Dossier →
CVE-2023-4115 MEDIUM
Component: cleaning_business_software

A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. Affected is an unknown function of the file /index.php....

📅 2023-08-03
CVSS 4.3 Dossier →
CVE-2023-4114 MEDIUM
Component: night_club_booking_software

A vulnerability was found in PHP Jabbers Night Club Booking Software 1.0. It has been rated as problematic. This issue affects some unknown processing...

📅 2023-08-03
CVSS 4.3 Dossier →
CVE-2023-4113 MEDIUM
Component: service_booking_script

A vulnerability was found in PHP Jabbers Service Booking Script 1.0. It has been declared as problematic. This vulnerability affects unknown code of t...

📅 2023-08-03
CVSS 4.3 Dossier →
CVE-2023-4112 MEDIUM
Component: shuttle_booking_software

A vulnerability was found in PHP Jabbers Shuttle Booking Software 1.0. It has been classified as problematic. This affects an unknown part of the file...

📅 2023-08-03
CVSS 4.3 Dossier →
Page 5 of 6 (139 Total Records)