Authenticated SQL Injection in PHP Jabbers scripts
18Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.6
exploitation probability
—
observed exploitation
nono source reports it
An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks.
This issue was fixed in the versions specified in the affected products list.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Affected products
PHP Jabbers · Appointment SchedulerPHP Jabbers · Auto Classifieds ScriptPHP Jabbers · Availability Booking CalendarPHP Jabbers · Availability CalendarPHP Jabbers · Business Directory ScriptPHP Jabbers · Bus Reservation SystemPHP Jabbers · Car Park Booking SystemPHP Jabbers · Car Rental ScriptPHP Jabbers · Cinema Booking SystemPHP Jabbers · Cleaning Business SoftwarePHP Jabbers · Equipment Rental ScriptPHP Jabbers · Event Booking CalendarPHP Jabbers · Event Ticketing SystemPHP Jabbers · Food Delivery ScriptPHP Jabbers · Hotel Booking SystemPHP Jabbers · Job Listing ScriptPHP Jabbers · Limo Booking SoftwarePHP Jabbers · Meeting Room Booking SystemPHP Jabbers · Member Directory ScriptPHP Jabbers · Member Login ScriptPHP Jabbers · PHP Event CalendarPHP Jabbers · PHP Newsletter ScriptPHP Jabbers · PHP Shopping CartPHP Jabbers · Product Comparison ScriptPHP Jabbers · Property Listing ScriptPHP Jabbers · Rental Property Booking CalendarPHP Jabbers · Restaurant Booking SystemPHP Jabbers · Service Booking ScriptPHP Jabbers · Shuttle Booking SoftwarePHP Jabbers · Taxi Booking ScriptPHP Jabbers · Ticket Support ScriptPHP Jabbers · Time Slots Booking CalendarPHP Jabbers · Travel Tours ScriptPHP Jabbers · Vacation Rental ScriptPHP Jabbers · Yacht Listing Script