CVE-2023-51296

Mô tả

Tham khảo

• packetstorm.news/files/id/176485 · Exploit
• phpjabbers.com/event-booking-calendar · Product
• packetstormsecurity.com/files/176485/PHPJabbers-Event-Booking-Calendar-4.0-Cross-Site-Scripting-HTML-Injection.html

Lỗ hổng khác của event booking calendar

• CVE-2023-51295TRUNG BÌNH 6.5PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, t…
• CVE-2023-51298TRUNG BÌNH 4.7PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vul…
• CVE-2023-51293CAO 7.5A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to sen…
• CVE-2023-40765NGHIÊM TRỌNG 9.8User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messa…
• CVE-2014-10015CAO 7.5SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL c…