CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36135
https://notcve.org/view.php?id=CVE-2023-36135
03 Aug 2023 — User enumeration is found in in PHPJabbers Class Scheduling System v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Una enumeración de usuarios fue detectada en Class Scheduling System v1.0 de PHPJabbers. Este problema se produce durante la recuperación de contraseñas, donde una diferencia en los mensajes podría permitir a un atacante determinar si el usuario es v... • https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4 •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36137
https://notcve.org/view.php?id=CVE-2023-36137
03 Aug 2023 — There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Scheduling System 1.0. Hay una vulnerabilidad de Cross Site Scripting (XSS) en el parámetro "theme" de preview.php en PHPJabbers Class Scheduling System 1.0. • https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36138
https://notcve.org/view.php?id=CVE-2023-36138
03 Aug 2023 — PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php. PHPJabbers Cleaning Business Software 1.0 es vulnerable a Cross Site Scripting (XSS) a través del parámetro theme de preview.php. • https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36139
https://notcve.org/view.php?id=CVE-2023-36139
03 Aug 2023 — In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts. En PHPJabbers Cleaning Business Software 1.0, la falta de verificación al cambiar una dirección de correo electrónico y/o contraseña (en la Página de Perfil) permite a atacantes remotos tomar el control de cuentas. • https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4 • CWE-345: Insufficient Verification of Data Authenticity •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36141
https://notcve.org/view.php?id=CVE-2023-36141
03 Aug 2023 — User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Se ha encontrado una enumeración de usuarios en PHPJabbers Cleaning Business Software v1.0. Este problema se produce durante la recuperación de contraseñas, donde una diferencia en los mensajes podría permitir a un atacante determinar si el usuario... • https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4 •
CVSS: 6.1EPSS: 1%CPEs: 1EXPL: 2CVE-2023-4110 – PHP Jabbers Availability Booking Calendar index.php cross site scripting
https://notcve.org/view.php?id=CVE-2023-4110
03 Aug 2023 — A vulnerability has been found in PHP Jabbers Availability Booking Calendar 5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument session_id leads to cross site scripting. The attack can be launched remotely. The identifier VDB-235957 was assigned to this vulnerability. • https://packetstorm.news/files/id/173926 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 1%CPEs: 1EXPL: 3CVE-2023-4111 – PHP Jabbers Bus Reservation System index.php cross site scripting
https://notcve.org/view.php?id=CVE-2023-4111
03 Aug 2023 — A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickup_id leads to cross site scripting. The attack may be launched remotely. VDB-235958 is the identifier assigned to this vulnerability. • https://packetstorm.news/files/id/173927 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 3%CPEs: 1EXPL: 3CVE-2023-4112 – PHP Jabbers Shuttle Booking Software index.php cross site scripting
https://notcve.org/view.php?id=CVE-2023-4112
03 Aug 2023 — A vulnerability was found in PHP Jabbers Shuttle Booking Software 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. • https://packetstorm.news/files/id/173930 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 3%CPEs: 1EXPL: 3CVE-2023-4113 – PHP Jabbers Service Booking Script index.php cross site scripting
https://notcve.org/view.php?id=CVE-2023-4113
03 Aug 2023 — A vulnerability was found in PHP Jabbers Service Booking Script 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack can be initiated remotely. • https://packetstorm.news/files/id/173931 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 5%CPEs: 1EXPL: 2CVE-2023-4114 – PHP Jabbers Night Club Booking Software index.php cross site scripting
https://notcve.org/view.php?id=CVE-2023-4114
03 Aug 2023 — A vulnerability was found in PHP Jabbers Night Club Booking Software 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack may be initiated remotely. • https://packetstorm.news/files/id/173932 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •