PHPJabbers

Records140All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical30CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

PHPJabbers records in CISA KEV

No PHPJabbers vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cleaning Business Software 9 records HIGH Time Slots Booking Calendar 9 records HIGH Appointment Scheduler 8 records HIGH Availability Booking Calendar 8 records HIGH Cinema Booking System 8 records HIGH Event Booking Calendar 7 records HIGH Fundraising Script 7 records HIGH Car Rental Script 6 records HIGH

Records

6 records in Car Rental Script · all components

TI-2023-21536 CVE-2023-40764 · GHSA-r62m-cw4f-74jw

User enumeration is found in PHP Jabbers Car Rental Script v3.0.

HIGH 82

User enumeration is found in PHP Jabbers Car Rental Script v3.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00891 Published 2023-08-28 No fix listed CWE-209

TI-2023-21526 CVE-2023-40754 · GHSA-9m3q-vvr4-j9x7

In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address…

MEDIUM 42

In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0096 Published 2023-08-28 No fix listed CWE-732

TI-2023-26649 CVE-2023-48834 · GHSA-4f2h-j443-g993

A lack of rate limiting in pjActionAjaxSend in Car Rental v3.0 allows attackers to cause resource exhaustion.

MEDIUM 41

A lack of rate limiting in pjActionAjaxSend in Car Rental v3.0 allows attackers to cause resource exhaustion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01051 Published 2023-12-07 No fix listed CWE-400

TI-2023-26650 CVE-2023-48835 · GHSA-7qgv-5crp-pfqq

Car Rental Script v3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.

MEDIUM 40

Car Rental Script v3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01201 Published 2023-12-07 No fix listed CWE-74

TI-2023-26652 CVE-2023-48837 · GHSA-mhq2-gh46-crf7

Car Rental Script 3.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.

LOW 25

Car Rental Script 3.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00465 Published 2023-12-07 No fix listed CWE-79

TI-2023-26651 CVE-2023-48836 · GHSA-mfxm-p7rp-j75w

Car Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues…

LOW 25

Car Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00465 Published 2023-12-07 No fix listed CWE-79

Open these records in search →

Critical	30
High	29
Medium	81
Low	0
No CVSS	0