CVE-2023-36140

概要

参考情報

• medium.com/%40blakehodder/additional-vulnerabilities-in-php-jabbers-scripts-c6bbd89b24bb
• phpjabbers.com/cleaning-business-software · Product

cleaning business software のその他の脆弱性

• CVE-2023-51328中 5.4PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "c_name, name" parameters.
• CVE-2023-51331中 6.5PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The…
• CVE-2023-51327中 6.5A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive…
• CVE-2023-51326中 6.5A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive…
• CVE-2023-36141中 5.3User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in…