CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36140
https://notcve.org/view.php?id=CVE-2023-36140
In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts. En PHPJabbers Cleaning Business Software 1.0, no hay cifrado en las contraseñas de los usuarios, permitiendo a un atacante obtener acceso a todas las cuentas de usuario. • https://medium.com/%40blakehodder/additional-vulnerabilities-in-php-jabbers-scripts-c6bbd89b24bb https://www.phpjabbers.com/cleaning-business-software • CWE-862: Missing Authorization •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 2CVE-2023-4115 – PHP Jabbers Cleaning Business index.php cross site scripting
https://notcve.org/view.php?id=CVE-2023-4115
A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. VDB-235962 is the identifier assigned to this vulnerability. • https://www.exploit-db.com/exploits/51651 http://packetstormsecurity.com/files/173936/PHPJabbers-Cleaning-Business-1.0-Cross-Site-Scripting.html https://vuldb.com/?ctiid.235962 https://vuldb.com/?id.235962 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36139
https://notcve.org/view.php?id=CVE-2023-36139
In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts. En PHPJabbers Cleaning Business Software 1.0, la falta de verificación al cambiar una dirección de correo electrónico y/o contraseña (en la Página de Perfil) permite a atacantes remotos tomar el control de cuentas. • https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4 https://www.phpjabbers.com/cleaning-business-software • CWE-345: Insufficient Verification of Data Authenticity •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36141
https://notcve.org/view.php?id=CVE-2023-36141
User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Se ha encontrado una enumeración de usuarios en PHPJabbers Cleaning Business Software v1.0. Este problema se produce durante la recuperación de contraseñas, donde una diferencia en los mensajes podría permitir a un atacante determinar si el usuario es válido o no, permitiendo un ataque de fuerza bruta con usuarios válidos. • https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4 https://www.phpjabbers.com/cleaning-business-software •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36138
https://notcve.org/view.php?id=CVE-2023-36138
PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php. PHPJabbers Cleaning Business Software 1.0 es vulnerable a Cross Site Scripting (XSS) a través del parámetro theme de preview.php. • https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4 https://www.phpjabbers.com/cleaning-business-software • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •