PHPJabbers

Records140All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical30CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

PHPJabbers records in CISA KEV

No PHPJabbers vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cleaning Business Software 9 records HIGH Time Slots Booking Calendar 9 records HIGH Appointment Scheduler 8 records HIGH Availability Booking Calendar 8 records HIGH Cinema Booking System 8 records HIGH Event Booking Calendar 7 records HIGH Fundraising Script 7 records HIGH Car Rental Script 6 records HIGH

Records

8 records in Availability Booking Calendar · all components

TI-2023-26647 CVE-2023-48831 · GHSA-fc6j-w9hx-r5xv

A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows…

HIGH 72

A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exhaustion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01162 Published 2023-12-07 No fix listed CWE-770

TI-2023-03806 CVE-2023-4110 · GHSA-6384-2m2x-45v7

PHP Jabbers Availability Booking Calendar index.php cross site scripting

MEDIUM 60

A vulnerability has been found in PHP Jabbers Availability Booking Calendar 5.0 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01777 Published 2023-08-03 No fix listed CWE-79

TI-2023-18128 CVE-2023-36133 · GHSA-24xj-hpq7-7f3v

PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.

MEDIUM 51

PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00891 Published 2023-08-03 No fix listed

TI-2023-18127 CVE-2023-36132 · GHSA-mcpj-3h59-ffr7

PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.

MEDIUM 51

PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00891 Published 2023-08-03 No fix listed

TI-2023-18126 CVE-2023-36131 · GHSA-5g27-h8hr-hm85

PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control…

MEDIUM 51

PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00891 Published 2023-08-03 No fix listed

TI-2023-26079 CVE-2023-48207 · GHSA-f375-4mfq-x442

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.

MEDIUM 40

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01166 Published 2023-12-07 No fix listed CWE-1236

TI-2023-26080 CVE-2023-48208 · GHSA-2fpf-cxrm-59cw

A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an…

LOW 28

A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_api_key, plugin_sms_country_code, uuid, title, or country name parameter to index…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00499 Published 2023-12-07 No fix listed CWE-79

TI-2023-26642 CVE-2023-48825 · GHSA-q4jp-jp3r-92m9

Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS…

LOW 25

Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00453 Published 2023-12-07 No fix listed CWE-79

Open these records in search →