CVE-2023-36136 | BDVDB-2026-208987 Detail

Description#

PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture all user names and passwords in clear text.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.phpjabbers.com/class-scheduling-system
https://medium.com/%40blakehodder/additional-vulnerabilities-in-php-jabbers-scripts-c6bbd89b24bb

Exploit#

No public exploit known

History#

Version 12023-08-08Record published in the CVE List.
Version 22024-10-10Most recent update recorded in the CVE List.