CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.24)
User enumeration is found in PHPJabbers Make an Offer Widget v1.0 during password recovery. Differences in messages could allow an attacker to determine if the user is valid, enabling a brute force attack on valid users.
User enumeration is found in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
User enumeration is found in PHP Jabbers Car Rental Script v3.0 during the password recovery process. Differences in messages could allow an attacker to determine if a user is valid, facilitating a brute force attack on user accounts.
User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
User enumeration is found in PHP Jabbers Restaurant Booking Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
User enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
User enumeration is found in PHPJabbers Callback Widget v1.0 during the password recovery process. Differences in messages could allow an attacker to determine if a user is valid, enabling a brute force attack on valid users.
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the 'column' parameter of index.php.
PHPJabbers Food Delivery Script version 3.0 has a SQL injection (SQLi) vulnerability in the 'q' parameter of index.php.
Saho's attendance devices ADM100 and ADM-100FP have insufficient filtering for special characters and file types within their file uploading function. This allows an unauthenticated remote attacker to upload and execute arbitrary files, potentially performing arbitrary system commands or disrupting service.
Saho's attendance devices ADM100 and ADM-100FP have insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication to read system information and operate user's data.
SpotCam Sense has a hidden Telnet function that is vulnerable to OS command injection. A remote unauthenticated attacker can exploit this vulnerability to execute arbitrary system commands or disrupt service.
SpotCam FHD 2 by SpotCam Co., Ltd. has a vulnerability related to the use of hard-coded uBoot credentials. A remote attacker can exploit this vulnerability to gain access to the system to perform arbitrary system operations or disrupt service.
The SpotCam FHD 2 device from SpotCam Co., Ltd. has a hidden Telnet function that is vulnerable to OS command injection. A remote unauthenticated attacker can exploit this vulnerability to perform command injection attacks or disrupt service.
The SpotCam FHD 2 device from SpotCam Co., Ltd. has a hidden Telnet function that contains a vulnerability due to hard-coded Telnet credentials. A remote unauthenticated attacker can exploit this vulnerability to gain access to the system and perform arbitrary system operations or disrupt services.