Phpjabbers vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2023-53926 PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote attackers to manipulate database queries.High 8.7 · Dec 17, 2025
• CVE-2023-53877 Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to manipulate database queries.Critical 9.3 · Dec 15, 2025
• CVE-2023-51336 PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code.High 8.8 · Feb 20, 2025
• CVE-2023-51333 PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code.High 8.8 · Feb 20, 2025
• CVE-2023-51319 PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code.High 8.8 · Feb 20, 2025
• CVE-2023-51316 A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows attackers to send an excessive amount of email for a lHigh 7.5 · Feb 20, 2025
• CVE-2023-51314 A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Restaurant Booking System v3.0 allows attackers to send an excessive amHigh 7.5 · Feb 20, 2025
• CVE-2023-51313 PHPJabbers Restaurant Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code.High 8.8 · Feb 20, 2025
• CVE-2023-51311 PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code.High 8.8 · Feb 20, 2025
• CVE-2023-51302 PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code.High 8.8 · Feb 19, 2025
• CVE-2023-51301 A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of resHigh 7.5 · Feb 19, 2025
• CVE-2023-51293 A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amounHigh 7.5 · Feb 19, 2025
• CVE-2024-57430 An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the Critical 9.8 · Feb 6, 2025
• CVE-2024-57428 A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields (event_img, seaCritical 9.3 · Feb 6, 2025
• CVE-2023-48841 Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.High 8.8 · Dec 7, 2023
• CVE-2023-48840 A lack of rate limiting in pjActionAjaxSend in Appointment Scheduler 3.0 allows attackers to cause resource exhaustion.High 7.5 · Dec 7, 2023
• CVE-2023-48835 Car Rental Script v3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.High 8.8 · Dec 7, 2023
• CVE-2023-48834 A lack of rate limiting in pjActionAjaxSend in Car Rental v3.0 allows attackers to cause resource exhaustion.High 7.5 · Dec 7, 2023
• CVE-2023-48833 A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers to cause resource exhaustion.High 7.5 · Dec 7, 2023
• CVE-2023-48831 A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exhaustion.High 7.5 · Dec 7, 2023
• CVE-2023-48830 Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export.High 8.8 · Dec 7, 2023
• CVE-2023-48826 Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List.High 8.8 · Dec 7, 2023
• CVE-2023-48207 Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.High 8.8 · Dec 7, 2023
• CVE-2023-43147 PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery (CSRF) to add an admin user via the Add Users Function, aka an index.php?controHigh 8.8 · Oct 12, 2023
• CVE-2023-36127 User enumeration is found in in PHPJabbers Appointment Scheduler 3.0.High 7.5 · Oct 10, 2023