Skip to content

Product

php jabbers Member Directory Script vulnerabilities

2 published CVES affecting php jabbers Member Directory Script, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest php jabbers Member Directory Script CVEs

Newest publication first

  1. CVE-2025-67651 CSRF in PHP Jabbers scripts

    Published
    MediumCVSS 6.9 EPSS 0.22%

    A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized admi...

  2. CVE-2025-67650 Authenticated SQL Injection in PHP Jabbers scripts

    Published
    HighCVSS 8.6 EPSS 0.38%

    An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue w...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.