Phpjabbers

Cleaning Business Software

11 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.9

CVE-2025-67651

  • EPSS 0.17%
  • Veröffentlicht 31.07.2026 11:40:44
  • Zuletzt bearbeitet 31.07.2026 20:16:45

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user...

8.6

CVE-2025-67650

  • EPSS 0.28%
  • Veröffentlicht 31.07.2026 11:40:40
  • Zuletzt bearbeitet 31.07.2026 20:16:45

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL I...

5.4

CVE-2023-51328

Exploit
  • EPSS 0.37%
  • Veröffentlicht 08.05.2025 00:00:00
  • Zuletzt bearbeitet 04.11.2025 19:16:19

PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "c_name, name" parameters.

6.5

CVE-2023-51326

Exploit
  • EPSS 0.45%
  • Veröffentlicht 20.02.2025 16:15:35
  • Zuletzt bearbeitet 04.11.2025 19:16:19

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of ge...

6.5

CVE-2023-51327

Exploit
  • EPSS 0.45%
  • Veröffentlicht 20.02.2025 16:15:35
  • Zuletzt bearbeitet 04.11.2025 19:16:19

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of ge...

6.5

CVE-2023-51331

Exploit
  • EPSS 0.5%
  • Veröffentlicht 20.02.2025 16:15:35
  • Zuletzt bearbeitet 04.11.2025 19:16:20

PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in...

9.8

CVE-2023-36140

  • EPSS 0.44%
  • Veröffentlicht 11.09.2023 15:16:00
  • Zuletzt bearbeitet 21.11.2024 08:09:21

In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts.

9.8

CVE-2023-36139

  • EPSS 0.45%
  • Veröffentlicht 04.08.2023 00:15:13
  • Zuletzt bearbeitet 21.11.2024 08:09:20

In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.

5.3

CVE-2023-36141

  • EPSS 0.58%
  • Veröffentlicht 04.08.2023 00:15:13
  • Zuletzt bearbeitet 21.11.2024 08:09:21

User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with...

6.1

CVE-2023-36138

  • EPSS 0.44%
  • Veröffentlicht 04.08.2023 00:15:12
  • Zuletzt bearbeitet 21.11.2024 08:09:20

PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php.