CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36140
https://notcve.org/view.php?id=CVE-2023-36140
11 Sep 2023 — In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts. En PHPJabbers Cleaning Business Software 1.0, no hay cifrado en las contraseñas de los usuarios, permitiendo a un atacante obtener acceso a todas las cuentas de usuario. • https://medium.com/%40blakehodder/additional-vulnerabilities-in-php-jabbers-scripts-c6bbd89b24bb • CWE-862: Missing Authorization •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36138
https://notcve.org/view.php?id=CVE-2023-36138
03 Aug 2023 — PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php. PHPJabbers Cleaning Business Software 1.0 es vulnerable a Cross Site Scripting (XSS) a través del parámetro theme de preview.php. • https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36139
https://notcve.org/view.php?id=CVE-2023-36139
03 Aug 2023 — In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts. En PHPJabbers Cleaning Business Software 1.0, la falta de verificación al cambiar una dirección de correo electrónico y/o contraseña (en la Página de Perfil) permite a atacantes remotos tomar el control de cuentas. • https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4 • CWE-345: Insufficient Verification of Data Authenticity •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36141
https://notcve.org/view.php?id=CVE-2023-36141
03 Aug 2023 — User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Se ha encontrado una enumeración de usuarios en PHPJabbers Cleaning Business Software v1.0. Este problema se produce durante la recuperación de contraseñas, donde una diferencia en los mensajes podría permitir a un atacante determinar si el usuario... • https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4 •
CVSS: 6.1EPSS: 3%CPEs: 1EXPL: 3CVE-2023-4115 – PHP Jabbers Cleaning Business index.php cross site scripting
https://notcve.org/view.php?id=CVE-2023-4115
03 Aug 2023 — A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. VDB-235962 is the identifier assigned to this vulnerability. • https://packetstorm.news/files/id/173936 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •