Approved changes feed: RSS · Atom

cpe:2.3:a:phpjabbers:cleaning_business_software:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorPhpjabbers (2f919538-31c8-5cbb-b18c-c6079deaeb0d)
ProductCleaning Business Software (b94899e8-870c-5a12-8839-ef657d718c57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-51331 vulnerable 2026-06-08 06:16:17.341122 Details available
PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.
Published: 2025-02-20T00:00:00.000Z
Updated: 2025-11-04T18:21:20.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51328 vulnerable 2026-06-08 06:16:17.338614 Details available
PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "c_name, name" parameters.
Published: 2025-05-08T00:00:00.000Z
Updated: 2025-11-04T18:21:17.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51327 vulnerable 2026-06-08 06:16:17.338227 Details available
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
Published: 2025-02-20T00:00:00.000Z
Updated: 2025-11-04T18:21:16.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51326 vulnerable 2026-06-08 06:16:17.337756 Details available
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
Published: 2025-02-20T00:00:00.000Z
Updated: 2025-11-04T18:21:15.412Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4115 vulnerable 2026-06-08 06:16:11.517988 PHP Jabbers Cleaning Business index.php cross site scripting
MEDIUM (4.3)
A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. VDB-235962 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-08-03T06:00:05.943Z
Updated: 2024-11-21T15:14:09.898Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36141 vulnerable 2026-06-08 06:06:28.585922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36140 vulnerable 2026-06-08 06:06:28.581107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36139 vulnerable 2026-06-08 06:06:28.580788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36138 vulnerable 2026-06-08 06:06:28.580371 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.