PHPJabbers

Records140All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical30CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

PHPJabbers records in CISA KEV

No PHPJabbers vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cleaning Business Software 9 records HIGH Time Slots Booking Calendar 9 records HIGH Appointment Scheduler 8 records HIGH Availability Booking Calendar 8 records HIGH Cinema Booking System 8 records HIGH Event Booking Calendar 7 records HIGH Fundraising Script 7 records HIGH Car Rental Script 6 records HIGH

Records

7 records in Event Booking Calendar · all components

TI-2023-21537 CVE-2023-40765 · GHSA-2c44-v444-62h2

User enumeration is found in PHPJabbers Event Booking Calendar v4.0.

HIGH 82

User enumeration is found in PHPJabbers Event Booking Calendar v4.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00891 Published 2023-08-28 No fix listed CWE-209

TI-2014-08177 CVE-2014-10015 · GHSA-83vh-6f9v-p6j4

SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0…

LOW 35

SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01234 Published 2015-01-13 No fix listed CWE-89

TI-2023-27968 CVE-2023-51293 · GHSA-v685-v3qp-pgjp

A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers…

LOW 34

A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Deni…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00749 Published 2025-02-19 No fix listed CWE-400

TI-2014-08176 CVE-2014-10014 · GHSA-rqwr-4952-2gm5

Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking…

LOW 34

Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change the username and pass…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01966 Published 2015-01-13 No fix listed CWE-352

TI-2023-27969 CVE-2023-51295 · GHSA-6895-x6gp-m725

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the…

LOW 31

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00397 Published 2025-05-08 No fix listed CWE-77

TI-2023-27970 CVE-2023-51296 · GHSA-qmvw-mmq3-8fjr

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting (XSS) in the…

LOW 28

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters which allows attackers to execute arbitr…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00461 Published 2025-02-19 No fix listed CWE-79

TI-2023-27972 CVE-2023-51298 · GHSA-qr42-xhm2-jg7w

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which…

LOW 22

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00408 Published 2025-02-19 No fix listed CWE-1236

Open these records in search →

Critical	30
High	29
Medium	81
Low	0
No CVSS	0