CVE-2023-51337

概要

参考情報

• packetstorm.news/files/id/176516 · Third Party Advisory
• phpjabbers.com/event-ticketing-system · Product
• packetstormsecurity.com/files/176516/PHPJabbers-Event-Ticketing-System-1.0-Cross-Site-Scripting-HTML-Injection.html

event ticketing system のその他の脆弱性

• CVE-2023-51339中 6.5A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amo…
• CVE-2023-51306中 5.4PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "name, title" parameters.
• CVE-2023-51303中 6.1PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, plugin_sms_api_key, plugin_sms_country_co…