Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-36127

EPSS 0.09% · P26
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-36127

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
PHPJabbers Appointment Scheduler 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PHPJabbers Appointment Scheduler是塞尔维亚PHPJabbers公司的一个基于Php的用于规划时间，预定会议计划的预约时间表插件。 PHPJabbers Appointment Scheduler v3.0版本存在安全漏洞，该漏洞源于消息的差异可能允许攻击者确定用户是否有效，从而启用有效用户的暴力攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2023-36127

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-36127

请登录查看更多情报信息。

Same Patch Batch · n/a · 2023-10-10 · 23 CVEs total

CVE-2020-27636Microchip MPLAB Net 安全特征问题漏洞
CVE-2023-36126PHPJabbers Appointment Scheduler 跨站脚本漏洞
CVE-2023-45312Ericsson Erlang 安全漏洞
CVE-2023-31096Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver 缓冲区错误漏洞
CVE-2023-43896Macrium Reflect 安全漏洞
CVE-2020-27213Multiple Embedded TCP/IP 安全特征问题漏洞
CVE-2020-27630Multiple Embedded TCP/IP 安全特征问题漏洞
CVE-2020-27631Oryx Embedded CycloneTCP ISN 安全特征问题漏洞
CVE-2020-27633FNET software 安全特征问题漏洞
CVE-2020-27634Contiki 安全特征问题漏洞
CVE-2020-27635Multiple Embedded TCP/IP 安全特征问题漏洞
CVE-2023-44959D-Link DSL-3782 命令注入漏洞
CVE-2023-44487Apache HTTP/2 资源管理错误漏洞
CVE-2023-44763PortlandLabs Concrete CMS 代码问题漏洞
CVE-2023-45208D-Link DAP-X1860 命令注入漏洞
CVE-2023-44846SeaCMS 安全漏洞
CVE-2023-44847SeaCMS 安全漏洞
CVE-2023-44848SeaCMS 安全漏洞
CVE-2020-18336Typora 跨站脚本漏洞
CVE-2023-42189Matter 安全漏洞

Showing top 20 of 23 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2023-36127

No comments yet

Leave a comment