CVE-2023-36132

Description

References

• medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
• phpjabbers.com/availability-booking-calendar · Product

Mais vulnerabilidades de availability booking calendar

• CVE-2023-48831ALTO 7.5A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exhaustion.
• CVE-2023-48825MÉDIO 5.4Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
• CVE-2023-48208MÉDIO 6.1A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_a…
• CVE-2023-48207ALTO 8.8Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.
• CVE-2023-36133CRÍTICO 9.8PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.