Phpjabbers Business Directory Script vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Phpjabbers Business Directory Script: 2 record(s), with affected versions and fixes.
CVE-2025-67651
Medium · 6.9
CWE-352 Jul 31, 2026
CSRF in PHP Jabbers scripts
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions, such as creating new admin accounts.
This issue was fixed in the versions specified in the affected products list.
CVE-2025-67650
High · 8.6
CWE-89 Jul 31, 2026
Authenticated SQL Injection in PHP Jabbers scripts
An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks.
This issue was fixed in the versions specified in the affected products list.