Skip to content
Noroxi

PHPJabbers records

139 published records for vendor phpjabbers.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
9
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 21
  3. 23
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

139 records
  • CVE-2023-40749
    40Plan

    PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php.

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    phpjabbers · food delivery scriptAug 28, 2023

  • CVE-2023-40748
    40Plan

    PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php.

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    phpjabbers · food delivery scriptAug 28, 2023

  • CVE-2020-22223
    39Monitor

    Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function.

    CriticalCVSS 9.8No exploitEPSS 1%

    phpjabbers · fundraising scriptNov 5, 2021

  • CVE-2020-22226
    39Monitor

    Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function.

    CriticalCVSS 9.8No exploitEPSS 1%

    phpjabbers · fundraising scriptNov 5, 2021

  • CVE-2020-22225
    39Monitor

    Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function.

    CriticalCVSS 9.8No exploitEPSS 1%

    phpjabbers · fundraising scriptNov 5, 2021

  • CVE-2023-40763
    39Monitor

    User enumeration is found in PHPJabbers Taxi Booking Script v2.0.

    CriticalCVSS 9.8No exploitEPSS 1%

    phpjabbers · taxi booking scriptAug 28, 2023

  • CVE-2023-39776
    39Monitor

    A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file

    CriticalCVSS 9.8No exploitEPSS 1%

    phpjabbers · ticket support scriptAug 10, 2023

  • CVE-2023-33561
    39Monitor

    Improper input validation of password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3 results in insecure passwords.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · time slots booking calendarAug 1, 2023

  • CVE-2023-40764
    39Monitor

    User enumeration is found in PHP Jabbers Car Rental Script v3.0.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · car rental scriptAug 28, 2023

  • CVE-2023-40756
    39Monitor

    User enumeration is found in PHPJabbers Callback Widget v1.0.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · callback widgetAug 28, 2023

  • CVE-2023-40759
    39Monitor

    User enumeration is found in PHP Jabbers Restaurant Booking Script v3.0.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · restaurant booking scriptAug 28, 2023

  • CVE-2023-40760
    39Monitor

    User enumeration is found in PHP Jabbers Hotel Booking System v4.0.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · hotel booking systemAug 28, 2023

  • CVE-2023-40761
    39Monitor

    User enumeration is found in PHPJabbers Yacht Listing Script v2.0.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · yacht listing scriptAug 28, 2023

  • CVE-2023-36131
    39Monitor

    PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password paramete

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · availability booking calendarAug 3, 2023

  • CVE-2023-40766
    39Monitor

    User enumeration is found in in PHPJabbers Ticket Support Script v3.2.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · ticket support scriptAug 28, 2023

  • CVE-2023-40757
    39Monitor

    User enumeration is found in PHPJabbers Food Delivery Script v3.1.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · food delivery scriptAug 28, 2023

  • CVE-2023-40758
    39Monitor

    User enumeration is found in PHPJabbers Document Creator v1.0.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · document creatorAug 28, 2023

  • CVE-2023-40762
    39Monitor

    User enumeration is found in PHPJabbers Fundraising Script v1.0.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · fundraising scriptAug 28, 2023

  • CVE-2023-40765
    39Monitor

    User enumeration is found in PHPJabbers Event Booking Calendar v4.0.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · event booking calendarAug 28, 2023

  • CVE-2023-36132
    39Monitor

    PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · availability booking calendarAug 3, 2023

  • CVE-2023-40767
    39Monitor

    User enumeration is found in in PHPJabbers Make an Offer Widget v1.0.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · make an offer widgetAug 28, 2023

  • CVE-2023-36133
    39Monitor

    PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · availability booking calendarAug 3, 2023

  • CVE-2024-57430
    39Monitor

    An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate datab

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    phpjabbers · cinema booking systemFeb 6, 2025

  • CVE-2023-36311
    39Monitor

    There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · document creatorAug 10, 2023

  • CVE-2023-33562
    39Monitor

    User enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3.

    CriticalCVSS 9.8No exploitEPSS 0%

    phpjabbers · time slots booking calendarAug 1, 2023