CVE-2023-36136 - PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture all user names and passwords in clear text

Back Back to CVE browser

MEDIUM

PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture all user names and passwords in clear text

Published Aug 8, 2023

6.5

MEDIUM

CVSS 3.1

EPSS 0.28%

Description

PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture all user names and passwords in clear text.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-312

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-40115		Advisory
https://medium.com/%40blakehodder/additional-vulnerabilities-in-php-jabbers-scripts-c6bbd89b24bb
https://www.phpjabbers.com/class-scheduling-system		Product