In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts.
References
Configurations
History
07 Nov 2023, 04:16
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
13 Sep 2023, 03:57
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:phpjabbers:cleaning_business_software:1.0:*:*:*:*:*:*:* | |
First Time |
Phpjabbers cleaning Business Software
Phpjabbers |
|
CWE | CWE-862 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
References | (MISC) https://www.phpjabbers.com/cleaning-business-software/ - Product | |
References | (MISC) https://medium.com/@blakehodder/additional-vulnerabilities-in-php-jabbers-scripts-c6bbd89b24bb - Exploit, Third Party Advisory |
11 Sep 2023, 15:16
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-09-11 15:16
Updated : 2024-02-28 20:33
NVD link : CVE-2023-36140
Mitre link : CVE-2023-36140
CVE.ORG link : CVE-2023-36140
JSON object : View
Products Affected
phpjabbers
- cleaning_business_software
CWE
CWE-862
Missing Authorization