PHPJabbers kayıtları
phpjabbers üreticisine ait 139 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 9
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')57
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')12
- CWE-209 Generation of Error Message Containing Sensitive Information11
- CWE-400 Uncontrolled Resource Consumption8
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File7
- CWE-770 Allocation of Resources Without Limits or Throttling5
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
139 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2023-40749Kavram kanıtı | PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php.phpjabbers · food delivery script · CWE-89 | Kritik9,8 | — | %3,7 | 28 Ağu 2023 |
40Planlayın | CVE-2023-40748Kavram kanıtı | PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php.phpjabbers · food delivery script · CWE-89 | Kritik9,8 | — | %3,3 | 28 Ağu 2023 |
39İzleyin | CVE-2020-22223İstismar yok | Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function.phpjabbers · fundraising script · CWE-89 | Kritik9,8 | — | %1,1 | 5 Kas 2021 |
39İzleyin | CVE-2020-22226İstismar yok | Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function.phpjabbers · fundraising script · CWE-89 | Kritik9,8 | — | %1,1 | 5 Kas 2021 |
39İzleyin | CVE-2020-22225İstismar yok | Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function.phpjabbers · fundraising script · CWE-89 | Kritik9,8 | — | %1,1 | 5 Kas 2021 |
39İzleyin | CVE-2023-40763İstismar yok | User enumeration is found in PHPJabbers Taxi Booking Script v2.0.phpjabbers · taxi booking script · CWE-209 | Kritik9,8 | — | %1,1 | 28 Ağu 2023 |
39İzleyin | CVE-2023-39776İstismar yok | A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted filephpjabbers · ticket support script · CWE-434 | Kritik9,8 | — | %1,0 | 10 Ağu 2023 |
39İzleyin | CVE-2023-33561İstismar yok | Improper input validation of password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3 results in insecure passwords.phpjabbers · time slots booking calendar | Kritik9,8 | — | %1,0 | 1 Ağu 2023 |
39İzleyin | CVE-2023-40764İstismar yok | User enumeration is found in PHP Jabbers Car Rental Script v3.0.phpjabbers · car rental script · CWE-209 | Kritik9,8 | — | %0,9 | 28 Ağu 2023 |
39İzleyin | CVE-2023-40756İstismar yok | User enumeration is found in PHPJabbers Callback Widget v1.0.phpjabbers · callback widget · CWE-203 | Kritik9,8 | — | %0,9 | 28 Ağu 2023 |
39İzleyin | CVE-2023-40759İstismar yok | User enumeration is found in PHP Jabbers Restaurant Booking Script v3.0.phpjabbers · restaurant booking script · CWE-209 | Kritik9,8 | — | %0,9 | 28 Ağu 2023 |
39İzleyin | CVE-2023-40760İstismar yok | User enumeration is found in PHP Jabbers Hotel Booking System v4.0.phpjabbers · hotel booking system · CWE-209 | Kritik9,8 | — | %0,9 | 28 Ağu 2023 |
39İzleyin | CVE-2023-40761İstismar yok | User enumeration is found in PHPJabbers Yacht Listing Script v2.0.phpjabbers · yacht listing script · CWE-209 | Kritik9,8 | — | %0,9 | 28 Ağu 2023 |
39İzleyin | CVE-2023-36131İstismar yok | PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password parametephpjabbers · availability booking calendar | Kritik9,8 | — | %0,9 | 3 Ağu 2023 |
39İzleyin | CVE-2023-40766İstismar yok | User enumeration is found in in PHPJabbers Ticket Support Script v3.2.phpjabbers · ticket support script · CWE-209 | Kritik9,8 | — | %0,9 | 28 Ağu 2023 |
39İzleyin | CVE-2023-40757İstismar yok | User enumeration is found in PHPJabbers Food Delivery Script v3.1.phpjabbers · food delivery script · CWE-209 | Kritik9,8 | — | %0,9 | 28 Ağu 2023 |
39İzleyin | CVE-2023-40758İstismar yok | User enumeration is found in PHPJabbers Document Creator v1.0.phpjabbers · document creator · CWE-209 | Kritik9,8 | — | %0,9 | 28 Ağu 2023 |
39İzleyin | CVE-2023-40762İstismar yok | User enumeration is found in PHPJabbers Fundraising Script v1.0.phpjabbers · fundraising script · CWE-209 | Kritik9,8 | — | %0,9 | 28 Ağu 2023 |
39İzleyin | CVE-2023-40765İstismar yok | User enumeration is found in PHPJabbers Event Booking Calendar v4.0.phpjabbers · event booking calendar · CWE-209 | Kritik9,8 | — | %0,9 | 28 Ağu 2023 |
39İzleyin | CVE-2023-36132İstismar yok | PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.phpjabbers · availability booking calendar | Kritik9,8 | — | %0,9 | 3 Ağu 2023 |
39İzleyin | CVE-2023-40767İstismar yok | User enumeration is found in in PHPJabbers Make an Offer Widget v1.0.phpjabbers · make an offer widget · CWE-209 | Kritik9,8 | — | %0,9 | 28 Ağu 2023 |
39İzleyin | CVE-2023-36133İstismar yok | PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.phpjabbers · availability booking calendar | Kritik9,8 | — | %0,9 | 3 Ağu 2023 |
39İzleyin | CVE-2024-57430Kavram kanıtı | An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate databphpjabbers · cinema booking system · CWE-89 | Kritik9,8 | — | %0,9 | 6 Şub 2025 |
39İzleyin | CVE-2023-36311İstismar yok | There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0.phpjabbers · document creator · CWE-89 | Kritik9,8 | — | %0,8 | 10 Ağu 2023 |
39İzleyin | CVE-2023-33562İstismar yok | User enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3.phpjabbers · time slots booking calendar | Kritik9,8 | — | %0,8 | 1 Ağu 2023 |
- CVE-2023-4074940Planlayın
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php.
KritikCVSS 9,8Kavram kanıtıEPSS %4phpjabbers · food delivery script28 Ağu 2023
- CVE-2023-4074840Planlayın
PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php.
KritikCVSS 9,8Kavram kanıtıEPSS %3phpjabbers · food delivery script28 Ağu 2023
- CVE-2020-2222339İzleyin
Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · fundraising script5 Kas 2021
- CVE-2020-2222639İzleyin
Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · fundraising script5 Kas 2021
- CVE-2020-2222539İzleyin
Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · fundraising script5 Kas 2021
- CVE-2023-4076339İzleyin
User enumeration is found in PHPJabbers Taxi Booking Script v2.0.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · taxi booking script28 Ağu 2023
- CVE-2023-3977639İzleyin
A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · ticket support script10 Ağu 2023
- CVE-2023-3356139İzleyin
Improper input validation of password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3 results in insecure passwords.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · time slots booking calendar1 Ağu 2023
- CVE-2023-4076439İzleyin
User enumeration is found in PHP Jabbers Car Rental Script v3.0.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · car rental script28 Ağu 2023
- CVE-2023-4075639İzleyin
User enumeration is found in PHPJabbers Callback Widget v1.0.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · callback widget28 Ağu 2023
- CVE-2023-4075939İzleyin
User enumeration is found in PHP Jabbers Restaurant Booking Script v3.0.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · restaurant booking script28 Ağu 2023
- CVE-2023-4076039İzleyin
User enumeration is found in PHP Jabbers Hotel Booking System v4.0.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · hotel booking system28 Ağu 2023
- CVE-2023-4076139İzleyin
User enumeration is found in PHPJabbers Yacht Listing Script v2.0.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · yacht listing script28 Ağu 2023
- CVE-2023-3613139İzleyin
PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password paramete
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · availability booking calendar3 Ağu 2023
- CVE-2023-4076639İzleyin
User enumeration is found in in PHPJabbers Ticket Support Script v3.2.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · ticket support script28 Ağu 2023
- CVE-2023-4075739İzleyin
User enumeration is found in PHPJabbers Food Delivery Script v3.1.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · food delivery script28 Ağu 2023
- CVE-2023-4075839İzleyin
User enumeration is found in PHPJabbers Document Creator v1.0.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · document creator28 Ağu 2023
- CVE-2023-4076239İzleyin
User enumeration is found in PHPJabbers Fundraising Script v1.0.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · fundraising script28 Ağu 2023
- CVE-2023-4076539İzleyin
User enumeration is found in PHPJabbers Event Booking Calendar v4.0.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · event booking calendar28 Ağu 2023
- CVE-2023-3613239İzleyin
PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · availability booking calendar3 Ağu 2023
- CVE-2023-4076739İzleyin
User enumeration is found in in PHPJabbers Make an Offer Widget v1.0.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · make an offer widget28 Ağu 2023
- CVE-2023-3613339İzleyin
PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · availability booking calendar3 Ağu 2023
- CVE-2024-5743039İzleyin
An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate datab
KritikCVSS 9,8Kavram kanıtıEPSS %1phpjabbers · cinema booking system6 Şub 2025
- CVE-2023-3631139İzleyin
There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · document creator10 Ağu 2023
- CVE-2023-3356239İzleyin
User enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3.
KritikCVSS 9,8İstismar yokEPSS %1phpjabbers · time slots booking calendar1 Ağu 2023