Phpjabbers

Event Booking Calendar

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2023-51295

Exploit
  • EPSS 0.31%
  • Veröffentlicht 08.05.2025 00:00:00
  • Zuletzt bearbeitet 04.11.2025 19:16:15

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters.

4.7

CVE-2023-51298

Exploit
  • EPSS 0.27%
  • Veröffentlicht 19.02.2025 20:15:34
  • Zuletzt bearbeitet 22.04.2025 20:01:27

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in Sys...

7.5

CVE-2023-51293

Exploit
  • EPSS 0.35%
  • Veröffentlicht 19.02.2025 19:15:14
  • Zuletzt bearbeitet 08.05.2025 16:15:23

A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a larg...

6.1

CVE-2023-51296

Exploit
  • EPSS 0.23%
  • Veröffentlicht 19.02.2025 19:15:14
  • Zuletzt bearbeitet 04.11.2025 19:16:15

PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters which allows attackers to execute arbitrary code

9.8

CVE-2023-40765

  • EPSS 0.11%
  • Veröffentlicht 28.08.2023 13:15:10
  • Zuletzt bearbeitet 21.11.2024 08:20:06

User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid...

7.5

CVE-2014-10015

Exploit
  • EPSS 1.02%
  • Veröffentlicht 13.01.2015 11:59:23
  • Zuletzt bearbeitet 12.04.2025 10:46:40

SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

6.8

CVE-2014-10014

Exploit
  • EPSS 0.85%
  • Veröffentlicht 13.01.2015 11:59:22
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change the username and password of the administrator via ...