critical9.8
CVE-2023-33562
User enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3.
Impact
User enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpjabbers | Time Slots Booking Calendar | Version 3.3 |
References
- NVD record
- CVE.org record
- https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
- https://www.phpjabbers.com/time-slots-booking-calendar/
- https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
- https://www.phpjabbers.com/time-slots-booking-calendar/