Phpjabbers

Car Park Booking System

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.9

CVE-2025-67651

  • EPSS 0.17%
  • Veröffentlicht 31.07.2026 11:40:44
  • Zuletzt bearbeitet 31.07.2026 20:16:45

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user...

8.6

CVE-2025-67650

  • EPSS 0.28%
  • Veröffentlicht 31.07.2026 11:40:40
  • Zuletzt bearbeitet 31.07.2026 20:16:45

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL I...

4.3

CVE-2023-51310

Exploit
  • EPSS 0.48%
  • Veröffentlicht 20.02.2025 15:15:12
  • Zuletzt bearbeitet 04.11.2025 19:16:17

A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a lar...

8.8

CVE-2023-51311

Exploit
  • EPSS 0.68%
  • Veröffentlicht 20.02.2025 15:15:12
  • Zuletzt bearbeitet 04.11.2025 19:16:17

PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in Sy...

6.1

CVE-2023-51308

Exploit
  • EPSS 0.34%
  • Veröffentlicht 20.02.2025 15:15:11
  • Zuletzt bearbeitet 04.11.2025 19:16:16

PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters.

4.3

CVE-2023-51309

Exploit
  • EPSS 0.48%
  • Veröffentlicht 20.02.2025 15:15:11
  • Zuletzt bearbeitet 04.11.2025 19:16:16

A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of genera...