CVE-2023-51315

概要

参考情報

• packetstorm.news/files/id/176493 · Exploit
• phpjabbers.com/restaurant-booking-system · Product
• packetstormsecurity.com/files/176493/PHPJabbers-Restaurant-Booking-System-3.0-Cross-Site-Scripting-HTML-Injection.html

restaurant booking system のその他の脆弱性

• CVE-2023-51317中 6.5PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code…
• CVE-2023-51314高 7.5A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Restaurant Booking System v3.0 allows attackers to …
• CVE-2023-51313高 8.8PHPJabbers Restaurant Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The …
• CVE-2023-51312中 5.4PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Reservations menu, Schedule section date …