CVE-2023-48825

概要

参考情報

• packetstormsecurity.com/files/176033 · Exploit

availability booking calendar のその他の脆弱性

• CVE-2023-48831高 7.5A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exhaustion.
• CVE-2023-48208中 6.1A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_a…
• CVE-2023-48207高 8.8Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.
• CVE-2023-36133緊急 9.8PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.
• CVE-2023-36132緊急 9.8PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.