CVE-2020-35416

MITTEL 6.1CVE-2020-35416 · Published 15/12/2020 · updated 17/06/2026

Kurz gesagt

CVE-2020-35416 ist eine Schwachstelle (MITTEL (CVSS 6.1)) in phpjabbers appointment scheduler (onlineonly).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.7%, höher als bei 86.1% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
phpjabbers appointment scheduler onlineonly	`= 2.3`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admin login webpage (with different request parameters), allows remote attackers to inject arbitrary web script or HTML.

References

packetstormsecurity.com/files/160502/PHPJabbers-Appointment-Scheduler-2.3-Cross-Site-Scripting.html · Exploit
packetstormsecurity.com/files/160600/PHPJabbers-Appointment-Scheduler-2.3-Cross-Site-Scripting.html · Exploit
exploit-db.com/exploits/49281 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free