Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-51101 State: PUBLISHED Published: 2023-12-26T00:00:00.000Z Last Updated: 2025-04-23T16:07:33.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GD008/TENDA/blob/main/W9/W9_setUplinkInfo/W9_setUplinkInfo.md
CVE ID: CVE-2023-51102 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:32:09.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/W9/W9_WifiMacFilterSet/W9_WifiMacFilterSet.md
CVE ID: CVE-2023-51103 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:32:09.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new_pixmap_from_float_data() of pixmap.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md - http://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=f1b5f87edd2675d5c79301e4ef2e1139f67f904b - https://bugs.ghostscript.com/show_bug.cgi?id=707620
CVE ID: CVE-2023-51104 State: PUBLISHED Published: 2023-12-26T00:00:00.000Z Last Updated: 2025-04-23T16:08:58.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_read_image() of load-pnm.c when span equals zero. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md - http://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=0c06a4e51519515615f6ab2d5b1f25da6771e1f4 - https://bugs.ghostscript.com/show_bug.cgi?id=707621
CVE ID: CVE-2023-51105 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:32:09.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompress_rle4() of load-bmp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md - http://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=cee86dc519d5270a3b96476ad15809ceace64a26 - https://bugs.ghostscript.com/show_bug.cgi?id=707622
CVE ID: CVE-2023-51106 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:32:09.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when fz_colorspace_n returns zero. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md
CVE ID: CVE-2023-51107 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-09-09T19:51:58.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c. NOTE: this is disputed by the supplier because there was not reasonable evidence to determine the existence of a vulnerability or identify the affected product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md
CVE ID: CVE-2023-51123 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-20T15:55:25.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WhereisRain/dir-815 - https://github.com/WhereisRain/dir-815/blob/main/README.md
CVE ID: CVE-2023-51126 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-10-17T19:14:35.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/risuxx/CVE-2023-51126
CVE ID: CVE-2023-51127 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-10-17T19:13:13.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerability allows an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by uploading a specially crafted symbolic link file. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is
no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/risuxx/CVE-2023-51127
CVE ID: CVE-2023-51133 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-11-20T16:58:50.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/26/1.md
CVE ID: CVE-2023-51135 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-08-02T22:32:09.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup. Additional Analyst Notes: - CVE Program Container: References: - https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/29/1.md
CVE ID: CVE-2023-51136 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-08-02T22:32:09.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule. Additional Analyst Notes: - CVE Program Container: References: - https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/28/1.md
CVE ID: CVE-2023-51141 State: PUBLISHED Published: 2024-03-21T00:00:00 Last Updated: 2024-08-16T15:43:21.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information via the Authentication & Authorization component Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://biotime.com - http://zkteko.com - https://gist.github.com/ipxsec/1680d29c49fe368be81b037168175b10
CVE ID: CVE-2023-51142 State: PUBLISHED Published: 2024-03-21T00:00:00.000Z Last Updated: 2025-06-24T14:58:14.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://zkteco.com - http://biotime.com - https://gist.github.com/ipxsec/b20383620c9e1d5300f7716e62e8a82f - https://www.zkteco.com/en/Security_Bulletinsibs/14
CVE ID: CVE-2023-51146 State: PUBLISHED Published: 2024-03-26T00:00:00 Last Updated: 2024-08-20T15:49:59.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in TRENDnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the adm_add_user action. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SpikeReply/advisories/blob/main/cve/trendnet/cve-2023-51146.md
CVE ID: CVE-2023-51147 State: PUBLISHED Published: 2024-03-26T00:00:00 Last Updated: 2024-08-05T20:22:27.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in TRENDnet Trendnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the adm_mod_pwd action. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SpikeReply/advisories/blob/main/cve/trendnet/cve-2023-51147.md
CVE ID: CVE-2023-51148 State: PUBLISHED Published: 2024-03-26T00:00:00 Last Updated: 2024-08-03T18:47:21.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in TRENDnet Trendnet AC1200 Dual Band PoE Indoor Wireless Access Point TEW-821DAP v.3.00b06 allows an attacker to execute arbitrary code via the 'mycli' command-line interface component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://trendnet.com - https://github.com/SpikeReply/advisories/blob/main/cve/trendnet/cve-2023-51148.md
CVE ID: CVE-2023-51154 State: PUBLISHED Published: 2024-01-04T00:00:00.000Z Last Updated: 2025-06-18T15:39:15.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jizhicms v2.5 was discovered to contain an arbitrary file download vulnerability via the component /admin/c/PluginsController.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/blue_ty/cms/issues/I8O7IV
CVE ID: CVE-2023-51157 State: PUBLISHED Published: 2024-09-25T00:00:00 Last Updated: 2024-09-25T19:47:50.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp Name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://infosecwriteups.com/xss-store-in-zkteco-welcome-to-wdms-3d5c8e1113f0
CVE ID: CVE-2023-51195 State: REJECTED Published: N/A Last Updated: 2024-01-10T19:31:37.579317 Description: No description available.
CVE ID: CVE-2023-51197 State: REJECTED Published: 2024-01-30T00:00:00 Last Updated: 2024-05-27T00:14:01.297Z Description: No description available.
CVE ID: CVE-2023-51198 State: REJECTED Published: 2024-01-30T00:00:00 Last Updated: 2024-05-27T00:14:01.459Z Description: No description available.
CVE ID: CVE-2023-51199 State: REJECTED Published: 2024-01-23T00:00:00 Last Updated: 2024-05-27T00:14:01.621Z Description: No description available.
CVE ID: CVE-2023-51200 State: REJECTED Published: 2024-01-23T00:00:00 Last Updated: 2024-05-27T00:14:01.798Z Description: No description available.
CVE ID: CVE-2023-51201 State: REJECTED Published: 2024-01-23T00:00:00 Last Updated: 2024-05-27T00:14:01.971Z Description: No description available.
CVE ID: CVE-2023-51202 State: REJECTED Published: 2024-01-30T00:00:00 Last Updated: 2024-05-27T00:14:02.154Z Description: No description available.
CVE ID: CVE-2023-51204 State: REJECTED Published: 2024-01-30T00:00:00 Last Updated: 2024-05-27T00:14:02.317Z Description: No description available.
CVE ID: CVE-2023-51208 State: REJECTED Published: 2024-01-23T00:00:00 Last Updated: 2024-05-27T00:14:02.492Z Description: No description available.
CVE ID: CVE-2023-51210 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-06-09T18:41:23.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Webkul Bundle Product 6.0.1 allows a remote attacker to execute arbitrary code via the id_product parameters in the UpdateProductQuantity function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40nasir.synack/uncovering-critical-vulnerability-cve-2023-51210-in-prestashop-plugin-bundle-product-pack-ad7fb08bdc91
CVE ID: CVE-2023-51217 State: PUBLISHED Published: 2024-01-18T00:00:00.000Z Last Updated: 2025-06-02T15:04:44.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in TenghuTOS TWS-200 firmware version:V4.0-201809201424 allows a remote attacker to execute arbitrary code via crafted command on the ping page component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/websafe2021/CVE/blob/main/TenghuTOS-TWS-200.md
CVE ID: CVE-2023-51219 State: PUBLISHED Published: 2024-06-03T00:00:00.000Z Last Updated: 2025-02-19T21:10:38.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: A deep link validation issue in KakaoTalk 10.4.3 allowed a remote adversary to direct users to run any attacker-controlled JavaScript within a WebView. The impact was further escalated by triggering another WebView that leaked its access token in a HTTP request header. Ultimately, this access token could be used to take over another user's account and read her/his chat messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://stulle123.github.io/posts/kakaotalk-account-ta
: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://stulle123.github.io/posts/kakaotalk-account-takeover/ - https://news.ycombinator.com/item?id=40776880
CVE ID: CVE-2023-51232 State: PUBLISHED Published: 2025-07-07T00:00:00.000Z Last Updated: 2025-07-08T17:37:51.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in dagster-webserver Dagster thru 1.5.11 allows remote attackers to obtain sensitive information via crafted request to the /logs endpoint. This may be restricted to certain file names that start with a dot ('.'). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dagster-io/dagster/pull/18462
CVE ID: CVE-2023-51246 State: PUBLISHED Published: 2024-01-08T00:00:00.000Z Last Updated: 2025-06-16T18:43:18.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) vulnerability in GetSimple CMS 3.3.16 exists when using Source Code Mode as a backend user to add articles via the /admin/edit.php page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/NING0121/CVE/issues/1 - https://gist.github.com/NING0121/25498c5326c2590423b26ace38d2cf39
CVE ID: CVE-2023-51252 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-20T15:56:54.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and online preview function is provided, pdf files and html files containing malicious code are uploaded, an XSS popup window is realized through online viewing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sanluan/PublicCMS/issues/79
CVE ID: CVE-2023-51254 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-06T20:15:40.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yukino-hiki/CVE/blob/main/4/There%20is%20a%20stored%20xss%20at%20the%20friendship%20link.md
CVE ID: CVE-2023-51257 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-11-04T22:05:25.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jasper-software/jasper/issues/367 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HNTGL7I5IJSQ4BZ5MGKWJPQYICUMHQ5I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBF5KYWCZVIDMITRX7GBVWGNW
tps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBF5KYWCZVIDMITRX7GBVWGNWKAMQORZ/
CVE ID: CVE-2023-51258 State: PUBLISHED Published: 2024-01-18T00:00:00 Last Updated: 2024-08-02T22:32:09.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token function in the modules/preprocs/nasm/nasm-pp:1512. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hanxuer/crashes/blob/main/yasm/04/readme.md
CVE ID: CVE-2023-51277 State: PUBLISHED Published: 2024-01-05T00:00:00.000Z Last Updated: 2025-06-03T14:41:42.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: nbviewer-app (aka Jupyter Notebook Viewer) before 0.1.6 has the get-task-allow entitlement for release builds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087731 - https://github.com/tuxu/nbviewer-app/commit/dc1e4ddf64c78e13175a39b076fa0646fc62e581 - https://github.com/tuxu/nbviewer-app/compare/0.1.5...0.1.6 - https://www.youtube.com/watch?v=c
75a39b076fa0646fc62e581 - https://github.com/tuxu/nbviewer-app/compare/0.1.5...0.1.6 - https://www.youtube.com/watch?v=c0nawqA_bdI
CVE ID: CVE-2023-51281 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-26T15:20:00.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html - https://github.com/geraldoalcantara/CVE-2023-51281
CVE ID: CVE-2023-51282 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-17T14:38:58.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/mingSoft/MCMS/issues/I4Q4NV - https://github.com/tanalala/CVE/blob/main/Code.md
CVE ID: CVE-2023-51293 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-05-20T14:35:46.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/event-booking-calendar/#sectionDemo - http://packetstormsecurity.com/files/176495/PHPJabbers-Event-Booking-Calendar-4.0-Missing-Rate-Limiting.htm
ectionDemo - http://packetstormsecurity.com/files/176495/PHPJabbers-Event-Booking-Calendar-4.0-Missing-Rate-Limiting.html - https://packetstorm.news/files/id/176495
CVE ID: CVE-2023-51295 State: PUBLISHED Published: 2025-05-08T00:00:00.000Z Last Updated: 2025-11-04T18:20:45.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/event-booking-calendar/#sectionDemo - https://packetstorm.news/files/id/176485
CVE ID: CVE-2023-51296 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-11-04T18:20:47.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters which allows attackers to execute arbitrary code Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/event-booking-calendar/#sectionDemo - https://packetstorm.news/files/id/176485
CVE ID: CVE-2023-51297 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-02-19T20:07:34.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/hotel-booking-system/#sectionDemo - http://packetstormsecurity.com/files/176486/PHPJabbers-Hotel-Booking-System-4.0-Missing-Rate-Limiting.html
CVE ID: CVE-2023-51298 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-02-20T15:08:20.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/event-booking-calendar/#sectionDemo - http://packetstormsecurity.com/files/176487/PHPJabbers-Event-Booking-Calendar-4.0-CSV-Injection.ht
lendar/#sectionDemo - http://packetstormsecurity.com/files/176487/PHPJabbers-Event-Booking-Calendar-4.0-CSV-Injection.html
CVE ID: CVE-2023-51299 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-11-04T18:20:48.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.phpjabbers.com/hotel-booking-system/#sectionDemo - https://packetstorm.news/files/id/176488