Vulnerabilities (CVE)

Filtered by vendor Phpjabbers Subscribe
Filtered by product Time Slots Booking Calendar
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-33561 1 Phpjabbers 1 Time Slots Booking Calendar 2023-08-04 N/A 9.8 CRITICAL
Improper input validation of password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3 results in insecure passwords.
CVE-2023-33562 1 Phpjabbers 1 Time Slots Booking Calendar 2023-08-04 N/A 9.8 CRITICAL
User enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.