CVE-2025-67650highCWE-89

CVE-2025-67650: fallo de gravedad alta en PHP Jabbers Appointment Scheduler

Authenticated SQL Injection in PHP Jabbers scripts

Publicada el

Seguir esta CVE+ Monitorear Bus Reservation System+ Monitorear Availability Booking Calendar

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.6epss 0.4%
An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the versions specified in the affected products list.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Productos afectados
PHP Jabbers · Appointment SchedulerPHP Jabbers · Auto Classifieds ScriptPHP Jabbers · Availability Booking CalendarPHP Jabbers · Availability CalendarPHP Jabbers · Business Directory ScriptPHP Jabbers · Bus Reservation SystemPHP Jabbers · Car Park Booking SystemPHP Jabbers · Car Rental ScriptPHP Jabbers · Cinema Booking SystemPHP Jabbers · Cleaning Business SoftwarePHP Jabbers · Equipment Rental ScriptPHP Jabbers · Event Booking CalendarPHP Jabbers · Event Ticketing SystemPHP Jabbers · Food Delivery ScriptPHP Jabbers · Hotel Booking SystemPHP Jabbers · Job Listing ScriptPHP Jabbers · Limo Booking SoftwarePHP Jabbers · Meeting Room Booking SystemPHP Jabbers · Member Directory ScriptPHP Jabbers · Member Login ScriptPHP Jabbers · PHP Event CalendarPHP Jabbers · PHP Newsletter ScriptPHP Jabbers · PHP Shopping CartPHP Jabbers · Product Comparison ScriptPHP Jabbers · Property Listing ScriptPHP Jabbers · Rental Property Booking CalendarPHP Jabbers · Restaurant Booking SystemPHP Jabbers · Service Booking ScriptPHP Jabbers · Shuttle Booking SoftwarePHP Jabbers · Taxi Booking ScriptPHP Jabbers · Ticket Support ScriptPHP Jabbers · Time Slots Booking CalendarPHP Jabbers · Travel Tours ScriptPHP Jabbers · Vacation Rental ScriptPHP Jabbers · Yacht Listing Script
CVEs relacionadas — PHP Jabbers Appointment Scheduler

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-4110LOWPHP Jabbers Availability Booking Calendar index.php cross site scriptingEPSS 1.8%CVE-2025-67651MEDIUMCSRF in PHP Jabbers scriptsEPSS 0.2%