Vulnerabilities

TI-2023-21534 CVE-2023-40762 · GHSA-vmv8-xm76-mq23

User enumeration is found in PHPJabbers Fundraising Script v1.0.

HIGH 82

User enumeration is found in PHPJabbers Fundraising Script v1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00891 Published 2023-08-28 No fix listed CWE-209

TI-2023-21523 CVE-2023-40751 · GHSA-cpcq-jgjj-xq5x

LOW 29

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action" parameter of index.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01088 Published 2023-08-28 No fix listed CWE-79

TI-2020-14312 CVE-2020-22226 · GHSA-xrc4-75vx-v89g

MEDIUM 44

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01133 Published 2021-11-05 No fix listed CWE-89

TI-2020-14311 CVE-2020-22225 · GHSA-2vfg-x9vh-wg4m

MEDIUM 44

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01133 Published 2021-11-05 No fix listed CWE-89

TI-2020-14310 CVE-2020-22224 · GHSA-w6q4-w82f-r9r3

LOW 28

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionPreview function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00662 Published 2021-11-05 No fix listed CWE-79

TI-2020-14309 CVE-2020-22223 · GHSA-qvrj-6mg2-568m

MEDIUM 44

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01133 Published 2021-11-05 No fix listed CWE-89

TI-2020-14308 CVE-2020-22222 · GHSA-pw9x-xwh7-vwp5

LOW 29

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionLoadCss function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0074 Published 2021-11-05 No fix listed CWE-79