Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (136 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-4112 1 Phpjabbers 1 Shuttle Booking Software 2024-11-21 4.3 Medium
A vulnerability was found in PHP Jabbers Shuttle Booking Software 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-235959. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2023-4111 1 Phpjabbers 1 Bus Reservation System 2024-11-21 4.3 Medium
A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickup_id leads to cross site scripting. The attack may be launched remotely. VDB-235958 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2023-4110 1 Phpjabbers 1 Availability Booking Calendar 2024-11-21 3.5 Low
A vulnerability has been found in PHP Jabbers Availability Booking Calendar 5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument session_id leads to cross site scripting. The attack can be launched remotely. The identifier VDB-235957 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2023-48841 1 Phpjabbers 1 Appointment Scheduler 2024-11-21 8.8 High
Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.
CVE-2023-48840 1 Phpjabbers 1 Appointment Scheduler 2024-11-21 7.5 High
A lack of rate limiting in pjActionAjaxSend in Appointment Scheduler 3.0 allows attackers to cause resource exhaustion.
CVE-2023-48839 1 Phpjabbers 1 Appointment Scheduler 2024-11-21 5.4 Medium
Appointment Scheduler 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
CVE-2023-48838 1 Phpjabbers 1 Appointment Scheduler 2024-11-21 5.4 Medium
Appointment Scheduler 3.0 is vulnerable to Multiple HTML Injection issues via the SMS API Key or Default Country Code.
CVE-2023-48837 1 Phpjabbers 1 Car Rental Script 2024-11-21 5.4 Medium
Car Rental Script 3.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
CVE-2023-48835 1 Phpjabbers 1 Car Rental Script 2024-11-21 8.8 High
Car Rental Script v3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.
CVE-2023-48833 1 Phpjabbers 1 Time Slots Booking Calendar 2024-11-21 7.5 High
A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers to cause resource exhaustion.
CVE-2023-48831 1 Phpjabbers 1 Availability Booking Calendar 2024-11-21 7.5 High
A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exhaustion.
CVE-2023-48830 1 Phpjabbers 1 Shuttle Booking Software 2024-11-21 8.8 High
Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export.
CVE-2023-48828 1 Phpjabbers 1 Time Slots Booking Calendar 2024-11-21 5.4 Medium
Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
CVE-2023-48827 1 Phpjabbers 1 Time Slots Booking Calendar 2024-11-21 5.4 Medium
Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
CVE-2023-48826 1 Phpjabbers 1 Time Slots Booking Calendar 2024-11-21 8.8 High
Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List.
CVE-2023-48825 1 Phpjabbers 1 Availability Booking Calendar 2024-11-21 5.4 Medium
Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
CVE-2023-48207 1 Phpjabbers 1 Availability Booking Calendar 2024-11-21 8.8 High
Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.
CVE-2023-48172 1 Phpjabbers 1 Shuttle Booking Software 2024-11-21 5.4 Medium
A Cross Site Scripting (XSS) vulnerability in Shuttle Booking Software 2.0 allows a remote attacker to inject JavaScript via the name, description, title, or address parameter to index.php.
CVE-2023-43274 1 Phpjabbers 1 Php Shopping Cart 2024-11-21 7.5 High
Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter.
CVE-2023-43147 1 Phpjabbers 1 Limo Booking Software 2024-11-21 8.8 High
PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery (CSRF) to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI.