Phpjabbers Food Delivery Script vulnerabilities

3 CVEs affecting Phpjabbers Food Delivery Script, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-40757, published 2023-08-28.

More from Phpjabbers.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-40749, published 2023-08-28. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php.
• CVE-2023-40748, published 2023-08-28. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php.
• CVE-2023-40757, published 2023-08-28. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid…