VendorsPHPJabbersticket_support_script3.2
Vulnerabilities

PHPJabbers Ticket Support Script 3.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2023-39776
A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file.
Published 2023-08-10 · Modified
9.8EPSS 0.010
CVE-2023-40766
User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
Published 2023-08-28 · Modified
9.8EPSS 0.009
CVE-2023-40753
There is a Cross Site Scripting (XSS) vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2.
Published 2023-08-28 · Modified
5.4EPSS 0.011