CVE-2023-51302
Published Feb 19, 2025PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient inp…
Vendor/product archive
phpjabbers / hotel_booking_system CVEs
Beta · best-effort6 CVEs tagged to phpjabbers / hotel_booking_system — 1 Critical, 2 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2023-51301
Published Feb 19, 2025A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a l…
CVE-2023-51300
Published Feb 19, 2025PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting (XSS) vulnerabilities in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_k…
CVE-2023-51299
Published Feb 19, 2025PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters.
CVE-2023-51297
Published Feb 19, 2025A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email for a legitimate user, leadin…
CVE-2023-40760
Published Aug 28, 2023User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine…
Showing 1-6 of 6 CVEsPage 1 of 1