CVE-2023-48208

Mô tả

Tham khảo

• packetstormsecurity.com/files/175805 · Third Party Advisory

Lỗ hổng khác của availability booking calendar

• CVE-2023-48831CAO 7.5A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exhaustion.
• CVE-2023-48825TRUNG BÌNH 5.4Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
• CVE-2023-48207CAO 8.8Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.
• CVE-2023-36133NGHIÊM TRỌNG 9.8PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.
• CVE-2023-36132NGHIÊM TRỌNG 9.8PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.