Phpjabbers

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-48828 1Phpjabbers 1Time Slots Booking Calendar Jun 17, 2026 Dec 7, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
CVE-2023-48827 1Phpjabbers 1Time Slots Booking Calendar Jun 17, 2026 Dec 7, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
CVE-2023-48826 1Phpjabbers 1Time Slots Booking Calendar Jun 17, 2026 Dec 7, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List.
CVE-2023-48825 1Phpjabbers 1Availability Booking Calendar Jun 17, 2026 Dec 7, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
CVE-2023-48208 1Phpjabbers 1Availability Booking Calendar Jun 17, 2026 Dec 7, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_api_key, plugin_sms_country_code, uuid, title, or country name parameter to index...Show more A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_api_key, plugin_sms_country_code, uuid, title, or country name parameter to index.php.Show less
CVE-2023-48207 1Phpjabbers 1Availability Booking Calendar Jun 17, 2026 Dec 7, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.
CVE-2023-48172 1Phpjabbers 1Shuttle Booking Software Jun 17, 2026 Dec 7, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A Cross Site Scripting (XSS) vulnerability in Shuttle Booking Software 2.0 allows a remote attacker to inject JavaScript via the name, description, title, or address parameter to index.php.
CVE-2023-43147 1Phpjabbers 1Limo Booking Software Jun 17, 2026 Oct 12, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery (CSRF) to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI.
CVE-2023-36127 1Phpjabbers 1Appointment Scheduler Jun 17, 2026 Oct 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling...Show more User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.Show less
CVE-2023-36126 1Phpjabbers 1Appointment Scheduler Jun 17, 2026 Oct 10, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Appointment Scheduler v3.0
CVE-2023-43274 1Phpjabbers 1Php Shopping Cart Jun 17, 2026 Sep 21, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter.
CVE-2023-36140 1Phpjabbers 1Cleaning Business Software Jun 17, 2026 Sep 11, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts.
CVE-2023-41539 1Phpjabbers 1Business Directory Script Jun 17, 2026 Aug 30, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 phpjabbers Business Directory Script 3.2 is vulnerable to SQL Injection via the column parameter.
CVE-2023-41538 1Phpjabbers 1Php Forum Script Jun 17, 2026 Aug 30, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting (XSS) via the keyword parameter.
CVE-2023-41537 1Phpjabbers 1Business Directory Script Jun 17, 2026 Aug 30, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting (XSS) via the keyword parameter.
CVE-2023-40767 1Phpjabbers 1Make An Offer Widget Jun 17, 2026 Aug 28, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling...Show more User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.Show less
CVE-2023-40766 1Phpjabbers 1Ticket Support Script Jun 17, 2026 Aug 28, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling...Show more User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.Show less
CVE-2023-40765 1Phpjabbers 1Event Booking Calendar Jun 17, 2026 Aug 28, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a...Show more User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.Show less
CVE-2023-40764 1Phpjabbers 1Car Rental Script Jun 17, 2026 Aug 28, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a bru...Show more User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.Show less
CVE-2023-40763 1Phpjabbers 1Taxi Booking Script Jun 17, 2026 Aug 28, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a br...Show more User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.Show less

Previous 1 2 345 6 7 Next