CVE-2023-40751

概要

参考情報

• medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
• phpjabbers.com/fundraising-script · Product

fundraising script のその他の脆弱性

• CVE-2023-40762緊急 9.8User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a difference in messages …
• CVE-2020-22226緊急 9.8Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function.
• CVE-2020-22225緊急 9.8Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function.
• CVE-2020-22224中 6.1Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionPreview …
• CVE-2020-22223緊急 9.8Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function.