Unrated severityNVD Advisory· Published Aug 3, 2023· Updated Oct 17, 2024

CVE-2023-36139

Description

In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.

Affected products

Phpjabbers/Cleaning Business Softwarecpe-rescue

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4mitre
www.phpjabbers.com/cleaning-business-software/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000