← Back

Phpjabbers

phpjabbers

139 CVEs • 37 products

Products (37)

Click to collapse
Toggle
Simple Cms
simple_cms
Rate Me
rate_me

CVEs (139)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Phpjabbers
1Simple Cms
Jun 17, 2026
Dec 17, 2025
5.1 MEDIUM· v4
5.4 MEDIUM· v3
N/A· v2
PHPJabbers Simple CMS 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through section name parameters. Attackers can create sections with embedded...Show more
PHPJabbers Simple CMS 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through section name parameters. Attackers can create sections with embedded JavaScript payloads that will execute when administrators view the sections, potentially enabling client-side code execution.Show less
1Phpjabbers
1Simple Cms
Jun 17, 2026
Dec 17, 2025
8.7 HIGH· v4
9.8 CRITICAL· v3
N/A· v2
PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote attackers to manipulate database queries. Attackers can inject crafted SQL payloads through the 'column' param...Show more
PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote attackers to manipulate database queries. Attackers can inject crafted SQL payloads through the 'column' parameter in the index.php endpoint to potentially extract or modify database information.Show less
1Phpjabbers
1Bus Reservation System
Jun 17, 2026
Dec 15, 2025
9.3 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQ...Show more
Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database.Show less
1Phpjabbers
1Restaurant Menu Maker
Jun 17, 2026
Sep 23, 2025
2.1 LOW· v4
6.1 MEDIUM· v3
5.0 MEDIUM· v2
A weakness has been identified in PHPJabbers Restaurant Menu Maker up to 1.1. Affected by this issue is some unknown functionality of the file /preview.php. This manipulation of the argument theme causes cross site scrip...Show more
A weakness has been identified in PHPJabbers Restaurant Menu Maker up to 1.1. Affected by this issue is some unknown functionality of the file /preview.php. This manipulation of the argument theme causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.Show less
1Phpjabbers
1Cleaning Business Software
Jun 17, 2026
May 8, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "c_name, name" parameters.
1Phpjabbers
1Event Booking Calendar
Jun 17, 2026
May 8, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters.
1Phpjabbers
1Event Ticketing System
Jun 17, 2026
Feb 20, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS...Show more
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.Show less
1Phpjabbers
1Meeting Room Booking System
Jun 17, 2026
Feb 20, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
PHPJabbers Meeting Room Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters of index.php page.
1Phpjabbers
1Event Ticketing System
Jun 17, 2026
Feb 20, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in "lid" parameter in index.
1Phpjabbers
1Meeting Room Booking System
Jun 17, 2026
Feb 20, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section...Show more
PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.Show less
1Phpjabbers
1Cinema Booking System
Jun 17, 2026
Feb 20, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters.
1Phpjabbers
1Cinema Booking System
Jun 17, 2026
Feb 20, 2025
N/A· v4
5.3 MEDIUM· v3
N/A· v2
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS)...Show more
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.Show less
1Phpjabbers
1Cinema Booking System
Jun 17, 2026
Feb 20, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Label...Show more
PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.Show less
1Phpjabbers
1Meeting Room Booking System
Jun 17, 2026
Feb 20, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Meeting Room Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service...Show more
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Meeting Room Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.Show less
1Phpjabbers
1Cleaning Business Software
Jun 17, 2026
Feb 20, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section...Show more
PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.Show less
1Phpjabbers
1Cinema Booking System
Jun 17, 2026
Feb 20, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Now Showing menu "date" parameter.
1Phpjabbers
1Cleaning Business Software
Jun 17, 2026
Feb 20, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service...Show more
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.Show less
1Phpjabbers
1Cleaning Business Software
Jun 17, 2026
Feb 20, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service...Show more
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.Show less
1Phpjabbers
1Shared Asset Booking System
Jun 17, 2026
Feb 20, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters.
1Phpjabbers
1Shared Asset Booking System
Jun 17, 2026
Feb 20, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section...Show more
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.Show less