CVE-2023-51300

概要

参考情報

• packetstorm.news/files/id/176488 · Exploit
• phpjabbers.com/hotel-booking-system · Product
• packetstormsecurity.com/files/176488/PHPJabbers-Hotel-Booking-System-4.0-Cross-Site-Scripting-HTML-Injection.html

hotel booking system のその他の脆弱性

• CVE-2023-51302高 8.8PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulne…
• CVE-2023-51301高 7.5A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an exc…
• CVE-2023-51299中 6.1PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugi…
• CVE-2023-51297中 6.5A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount…
• CVE-2023-40760緊急 9.8User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messag…