GCVE - cpe:2.3:a:phpjabbers:document_creator:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpjabbers:document_creator:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Phpjabbers (`2f919538-31c8-5cbb-b18c-c6079deaeb0d`)
Product	Document Creator (`1714443a-15c8-5465-bcd8-a884012459d6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-40758`	vulnerable	2026-06-03 14:52:50.629442	Details available User enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Published: 2023-08-28T00:00:00.000Z Updated: 2024-10-02T15:54:59.435Z Open on db.gcve.eu Reference links https://www.phpjabbers.com/document-creator/ https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36313`	vulnerable	2026-06-03 14:52:19.778197	Details available PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting (XSS) via all post parameters of "Export Requests" aside from "request_feed". Published: 2023-08-10T00:00:00.000Z Updated: 2024-10-09T20:17:13.504Z Open on db.gcve.eu Reference links https://www.phpjabbers.com/document-creator https://medium.com/%40milfortutz/multiple-vulnerabilities-in-phpjabbers-part-1-6703becb4cd4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36311`	vulnerable	2026-06-03 14:52:19.776389	Details available There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0. Published: 2023-08-10T00:00:00.000Z Updated: 2024-10-09T20:42:55.617Z Open on db.gcve.eu Reference links https://www.phpjabbers.com/document-creator https://medium.com/%40milfortutz/multiple-vulnerabilities-in-phpjabbers-part-1-6703becb4cd4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36310`	vulnerable	2026-06-03 14:52:19.776092	Details available There is a Cross Site Scripting (XSS) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0. Published: 2023-08-10T00:00:00.000Z Updated: 2024-10-10T14:35:16.200Z Open on db.gcve.eu Reference links https://www.phpjabbers.com/document-creator https://medium.com/%40milfortutz/multiple-vulnerabilities-in-phpjabbers-part-1-6703becb4cd4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36309`	vulnerable	2026-06-03 14:52:19.775727	Details available There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0. Published: 2023-08-10T00:00:00.000Z Updated: 2024-10-09T20:44:29.624Z Open on db.gcve.eu Reference links https://www.phpjabbers.com/document-creator https://medium.com/%40milfortutz/multiple-vulnerabilities-in-phpjabbers-part-1-6703becb4cd4	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.