CVE-2014-10015

概要

参考情報

• packetstormsecurity.com/files/124753/eventbookingcalendar-xssxsrfsql.txt · Exploit

event booking calendar のその他の脆弱性

• CVE-2023-51295中 6.5PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, t…
• CVE-2023-51298中 4.7PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vul…
• CVE-2023-51296中 6.1PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code…
• CVE-2023-51293高 7.5A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to sen…
• CVE-2023-40765緊急 9.8User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messa…