| CVE-2023-48828 | MOYENNE5.4 | Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter. | 07/12/2023 |
| CVE-2023-48827 | MOYENNE5.4 | Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter. | 07/12/2023 |
| CVE-2023-48826 | ÉLEVÉE8.8 | Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List. | 07/12/2023 |
| CVE-2023-48825 | MOYENNE5.4 | Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code. | 07/12/2023 |
| CVE-2023-48208 | MOYENNE6.1 | A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_api_key, plugin_sms_country_code, uuid, title, or country name parameter to index.php. | 07/12/2023 |
| CVE-2023-48207 | ÉLEVÉE8.8 | Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component. | 07/12/2023 |
| CVE-2023-48172 | MOYENNE5.4 | A Cross Site Scripting (XSS) vulnerability in Shuttle Booking Software 2.0 allows a remote attacker to inject JavaScript via the name, description, title, or address parameter to index.php. | 07/12/2023 |
| CVE-2023-43147 | ÉLEVÉE8.8 | PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery (CSRF) to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI. | 12/10/2023 |
| CVE-2023-36127 | ÉLEVÉE7.5 | User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. | 10/10/2023 |
| CVE-2023-36126 | MOYENNE6.1 | There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Appointment Scheduler v3.0 | 10/10/2023 |
| CVE-2023-43274 | ÉLEVÉE7.5 | Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter. | 21/09/2023 |
| CVE-2023-36140 | CRITIQUE9.8 | In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts. | 11/09/2023 |
| CVE-2023-41539 | ÉLEVÉE7.5 | phpjabbers Business Directory Script 3.2 is vulnerable to SQL Injection via the column parameter. | 30/08/2023 |
| CVE-2023-41538 | MOYENNE6.1 | phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting (XSS) via the keyword parameter. | 30/08/2023 |
| CVE-2023-41537 | MOYENNE6.1 | phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting (XSS) via the keyword parameter. | 30/08/2023 |
| CVE-2023-40767 | CRITIQUE9.8 | User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. | 28/08/2023 |
| CVE-2023-40766 | CRITIQUE9.8 | User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. | 28/08/2023 |
| CVE-2023-40765 | CRITIQUE9.8 | User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. | 28/08/2023 |
| CVE-2023-40764 | CRITIQUE9.8 | User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. | 28/08/2023 |
| CVE-2023-40763 | CRITIQUE9.8 | User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. | 28/08/2023 |