CVE-2023-51300

Description

References

• packetstorm.news/files/id/176488 · Exploit
• phpjabbers.com/hotel-booking-system · Product
• packetstormsecurity.com/files/176488/PHPJabbers-Hotel-Booking-System-4.0-Cross-Site-Scripting-HTML-Injection.html

Weitere Schwachstellen in hotel booking system

• CVE-2023-51302HOCH 8.8PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulne…
• CVE-2023-51301HOCH 7.5A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an exc…
• CVE-2023-51299MITTEL 6.1PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugi…
• CVE-2023-51297MITTEL 6.5A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount…
• CVE-2023-40760KRITISCH 9.8User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messag…