PT-2026-66748 · Phpjabbers · Appointment Scheduler+34
CVSS v4.0
8.6
High
| Vector | AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks.
This issue was fixed in the versions specified in the affected products list.
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Appointment Scheduler
Auto Classifieds Script
Availability Booking Calendar
Availability Calendar
Bus Reservation System
Business Directory Script
Car Park Booking System
Car Rental Script
Cinema Booking System
Cleaning Business
Equipment Rental Script
Event Booking Calendar
Event Ticketing System
Food Delivery Script
Hotel Booking System Pro
Job Listing Script
Limo Booking
Meeting Room Booking System
Member Directory Script
Member Login Script
Phpeventcalendar
Php Newsletter Script
Php Shopping Cart
Product Comparison Script
Property Listing Script
Rental Property Booking Calendar
Restaurant Booking System
Service Booking Script
Shuttle Booking
Taxi Booking Script
Ticket Support Script
Time Slots Booking Calendar
Travel Tours Script
Vacation Rental Script
Yacht Listing Script