CVE-2023-51296

概要

参考情報

• packetstorm.news/files/id/176485 · Exploit
• phpjabbers.com/event-booking-calendar · Product
• packetstormsecurity.com/files/176485/PHPJabbers-Event-Booking-Calendar-4.0-Cross-Site-Scripting-HTML-Injection.html

event booking calendar のその他の脆弱性

• CVE-2023-51295中 6.5PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, t…
• CVE-2023-51298中 4.7PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vul…
• CVE-2023-51293高 7.5A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to sen…
• CVE-2023-40765緊急 9.8User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messa…
• CVE-2014-10015高 7.5SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL c…