PT-2026-66749 · Phpjabbers · Appointment Scheduler+34
CVSS v4.0
6.9
Média
| Vetor | AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions, such as creating new admin accounts.
This issue was fixed in the versions specified in the affected products list.
Correção
CSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Appointment Scheduler
Auto Classifieds Script
Availability Booking Calendar
Availability Calendar
Bus Reservation System
Business Directory Script
Car Park Booking System
Car Rental Script
Cinema Booking System
Cleaning Business
Equipment Rental Script
Event Booking Calendar
Event Ticketing System
Food Delivery Script
Hotel Booking System Pro
Job Listing Script
Limo Booking
Meeting Room Booking System
Member Directory Script
Member Login Script
Phpeventcalendar
Php Newsletter Script
Php Shopping Cart
Product Comparison Script
Property Listing Script
Rental Property Booking Calendar
Restaurant Booking System
Service Booking Script
Shuttle Booking
Taxi Booking Script
Ticket Support Script
Time Slots Booking Calendar
Travel Tours Script
Vacation Rental Script
Yacht Listing Script