PHPJabbers

Records140All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical30CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

PHPJabbers records in CISA KEV

No PHPJabbers vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cleaning Business Software 9 records HIGH Time Slots Booking Calendar 9 records HIGH Appointment Scheduler 8 records HIGH Availability Booking Calendar 8 records HIGH Cinema Booking System 8 records HIGH Event Booking Calendar 7 records HIGH Fundraising Script 7 records HIGH Car Rental Script 6 records HIGH

Records

7 records in Fundraising Script · all components

TI-2023-21534 CVE-2023-40762 · GHSA-vmv8-xm76-mq23

User enumeration is found in PHPJabbers Fundraising Script v1.0.

HIGH 82

User enumeration is found in PHPJabbers Fundraising Script v1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00891 Published 2023-08-28 No fix listed CWE-209

TI-2020-14312 CVE-2020-22226 · GHSA-xrc4-75vx-v89g

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection…

MEDIUM 44

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01133 Published 2021-11-05 No fix listed CWE-89

TI-2020-14311 CVE-2020-22225 · GHSA-2vfg-x9vh-wg4m

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection…

MEDIUM 44

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01133 Published 2021-11-05 No fix listed CWE-89

TI-2020-14309 CVE-2020-22223 · GHSA-qvrj-6mg2-568m

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection…

MEDIUM 44

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01133 Published 2021-11-05 No fix listed CWE-89

TI-2023-21523 CVE-2023-40751 · GHSA-cpcq-jgjj-xq5x

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action" parameter of index.php.

LOW 29

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action" parameter of index.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01088 Published 2023-08-28 No fix listed CWE-79

TI-2020-14308 CVE-2020-22222 · GHSA-pw9x-xwh7-vwp5

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site…

LOW 29

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionLoadCss function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0074 Published 2021-11-05 No fix listed CWE-79

TI-2020-14310 CVE-2020-22224 · GHSA-w6q4-w82f-r9r3

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site…

LOW 28

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionPreview function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00662 Published 2021-11-05 No fix listed CWE-79

Open these records in search →

Critical	30
High	29
Medium	81
Low	0
No CVSS	0