Description
An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the versions specified in the affected products list.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
PHP Jabbers Appointment Scheduler
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Bus Reservation System
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Car Park Booking System
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Car Rental Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Cinema Booking System
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Event Booking Calendar
Default version status: unaffected
0 to < 5.1affected
PHP Jabbers Event Ticketing System
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Hotel Booking System
Default version status: unaffected
0 to < 5.1affected
PHP Jabbers Cleaning Business Software
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Equipment Rental Script
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Food Delivery Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Member Login Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Member Directory Script
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Availability Calendar
Default version status: unaffected
0 to < 6.1affected
PHP Jabbers PHP Event Calendar
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers PHP Newsletter Script
Default version status: unaffected
0 to < 5.1affected
PHP Jabbers Product Comparison Script
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Ticket Support Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers PHP Shopping Cart
Default version status: unaffected
0 to < 6.0affected
PHP Jabbers Auto Classifieds Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Business Directory Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Availability Booking Calendar
Default version status: unaffected
0 to < 6.1affected
PHP Jabbers Time Slots Booking Calendar
Default version status: unaffected
0 to < 5.1affected
PHP Jabbers Restaurant Booking System
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Shuttle Booking Software
Default version status: unaffected
0 to < 3.1affected
PHP Jabbers Meeting Room Booking System
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Rental Property Booking Calendar
Default version status: unaffected
0 to < 3.1affected
PHP Jabbers Service Booking Script
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Limo Booking Software
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Taxi Booking Script
Default version status: unaffected
0 to < 3.1affected
PHP Jabbers Job Listing Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Property Listing Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Travel Tours Script
Default version status: unaffected
0 to < 3.1affected
PHP Jabbers Vacation Rental Script
Default version status: unaffected
0 to < 5.1affected
PHP Jabbers Yacht Listing Script
Default version status: unaffected
0 to < 3.1affected