CVE-2023-51327

概要

参考情報

• packetstorm.news/files/id/176506 · Exploit
• phpjabbers.com/cleaning-business-software · Product
• packetstormsecurity.com/files/176506/PHPJabbers-Cleaning-Business-Software-1.0-Missing-Rate-Limiting.html

cleaning business software のその他の脆弱性

• CVE-2023-51328中 5.4PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "c_name, name" parameters.
• CVE-2023-51331中 6.5PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The…
• CVE-2023-51326中 6.5A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive…
• CVE-2023-36140緊急 9.8In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accou…
• CVE-2023-36141中 5.3User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in…