Phpjabbers

Hotel Booking System

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2023-51300

Exploit
  • EPSS 0.17%
  • Veröffentlicht 19.02.2025 21:15:14
  • Zuletzt bearbeitet 04.11.2025 19:16:15

PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting (XSS) vulnerabilities in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters.

7.5

CVE-2023-51301

Exploit
  • EPSS 0.49%
  • Veröffentlicht 19.02.2025 21:15:14
  • Zuletzt bearbeitet 04.11.2025 19:16:15

A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a lar...

8.8

CVE-2023-51302

Exploit
  • EPSS 0.28%
  • Veröffentlicht 19.02.2025 21:15:14
  • Zuletzt bearbeitet 23.04.2025 14:19:53

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in Syste...

6.1

CVE-2023-51299

Exploit
  • EPSS 0.16%
  • Veröffentlicht 19.02.2025 20:15:35
  • Zuletzt bearbeitet 04.11.2025 19:16:15

PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters.

6.5

CVE-2023-51297

Exploit
  • EPSS 0.4%
  • Veröffentlicht 19.02.2025 20:15:34
  • Zuletzt bearbeitet 22.04.2025 20:03:27

A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated...

9.8

CVE-2023-40760

  • EPSS 0.1%
  • Veröffentlicht 28.08.2023 13:15:10
  • Zuletzt bearbeitet 21.11.2024 08:20:05

User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid ...