medium6.5
CVE-2023-36136
PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture all user…
Impact
PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture all user names and passwords in clear text.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpjabbers | Class Scheduling System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://medium.com/%40blakehodder/additional-vulnerabilities-in-php-jabbers-scripts-c6bbd89b24bb
- https://www.phpjabbers.com/class-scheduling-system
- https://medium.com/%40blakehodder/additional-vulnerabilities-in-php-jabbers-scripts-c6bbd89b24bb
- https://www.phpjabbers.com/class-scheduling-system