Description
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions, such as creating new admin accounts. This issue was fixed in the versions specified in the affected products list.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
PHP Jabbers Appointment Scheduler
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Bus Reservation System
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Car Park Booking System
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Car Rental Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Cinema Booking System
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Event Booking Calendar
Default version status: unaffected
0 to < 5.1affected
PHP Jabbers Event Ticketing System
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Hotel Booking System
Default version status: unaffected
0 to < 5.1affected
PHP Jabbers Cleaning Business Software
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Equipment Rental Script
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Food Delivery Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Member Login Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Member Directory Script
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Availability Calendar
Default version status: unaffected
0 to < 6.1affected
PHP Jabbers PHP Event Calendar
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers PHP Newsletter Script
Default version status: unaffected
0 to < 5.1affected
PHP Jabbers Product Comparison Script
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Ticket Support Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers PHP Shopping Cart
Default version status: unaffected
0 to < 6.0affected
PHP Jabbers Auto Classifieds Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Business Directory Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Availability Booking Calendar
Default version status: unaffected
0 to < 6.1affected
PHP Jabbers Time Slots Booking Calendar
Default version status: unaffected
0 to < 5.1affected
PHP Jabbers Restaurant Booking System
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Shuttle Booking Software
Default version status: unaffected
0 to < 3.1affected
PHP Jabbers Meeting Room Booking System
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Rental Property Booking Calendar
Default version status: unaffected
0 to < 3.1affected
PHP Jabbers Service Booking Script
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Limo Booking Software
Default version status: unaffected
0 to < 2.1affected
PHP Jabbers Taxi Booking Script
Default version status: unaffected
0 to < 3.1affected
PHP Jabbers Job Listing Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Property Listing Script
Default version status: unaffected
0 to < 4.1affected
PHP Jabbers Travel Tours Script
Default version status: unaffected
0 to < 3.1affected
PHP Jabbers Vacation Rental Script
Default version status: unaffected
0 to < 5.1affected
PHP Jabbers Yacht Listing Script
Default version status: unaffected
0 to < 3.1affected