An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the versions specified in the affected products list.
History

Fri, 31 Jul 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Fri, 31 Jul 2026 12:00:00 +0000

Type Values Removed Values Added
Description An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the versions specified in the affected products list.
Title Authenticated SQL Injection in PHP Jabbers scripts
First Time appeared Php Jabbers
Php Jabbers appointment Scheduler
Php Jabbers auto Classifieds Script
Php Jabbers availability Booking Calendar
Php Jabbers availability Calendar
Php Jabbers bus Reservation System
Php Jabbers business Directory Script
Php Jabbers car Park Booking System
Php Jabbers car Rental Script
Php Jabbers cinema Booking System
Php Jabbers cleaning Business Software
Php Jabbers equipment Rental Script
Php Jabbers event Booking Calendar
Php Jabbers event Ticketing System
Php Jabbers food Delivery Script
Php Jabbers hotel Booking System
Php Jabbers job Listing Script
Php Jabbers limo Booking Software
Php Jabbers meeting Room Booking System
Php Jabbers member Directory Script
Php Jabbers member Login Script
Php Jabbers php Event Calendar
Php Jabbers php Newsletter Script
Php Jabbers php Shopping Cart
Php Jabbers product Comparison Script
Php Jabbers property Listing Script
Php Jabbers rental Property Booking Calendar
Php Jabbers restaurant Booking System
Php Jabbers service Booking Script
Php Jabbers shuttle Booking Software
Php Jabbers taxi Booking Script
Php Jabbers ticket Support Script
Php Jabbers time Slots Booking Calendar
Php Jabbers travel Tours Script
Php Jabbers vacation Rental Script
Php Jabbers yacht Listing Script
Weaknesses CWE-89
CPEs cpe:2.3:a:php_jabbers:appointment_scheduler:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:auto_classifieds_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:availability_booking_calendar:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:availability_calendar:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:bus_reservation_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:business_directory_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:car_park_booking_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:car_rental_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:cinema_booking_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:cleaning_business_software:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:equipment_rental_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:event_booking_calendar:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:event_ticketing_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:food_delivery_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:hotel_booking_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:job_listing_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:limo_booking_software:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:meeting_room_booking_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:member_directory_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:member_login_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:php_event_calendar:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:php_newsletter_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:php_shopping_cart:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:product_comparison_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:property_listing_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:rental_property_booking_calendar:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:restaurant_booking_system:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:service_booking_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:shuttle_booking_software:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:taxi_booking_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:ticket_support_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:time_slots_booking_calendar:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:travel_tours_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:vacation_rental_script:*:*:*:*:*:*:*:*
cpe:2.3:a:php_jabbers:yacht_listing_script:*:*:*:*:*:*:*:*
Vendors & Products Php Jabbers
Php Jabbers appointment Scheduler
Php Jabbers auto Classifieds Script
Php Jabbers availability Booking Calendar
Php Jabbers availability Calendar
Php Jabbers bus Reservation System
Php Jabbers business Directory Script
Php Jabbers car Park Booking System
Php Jabbers car Rental Script
Php Jabbers cinema Booking System
Php Jabbers cleaning Business Software
Php Jabbers equipment Rental Script
Php Jabbers event Booking Calendar
Php Jabbers event Ticketing System
Php Jabbers food Delivery Script
Php Jabbers hotel Booking System
Php Jabbers job Listing Script
Php Jabbers limo Booking Software
Php Jabbers meeting Room Booking System
Php Jabbers member Directory Script
Php Jabbers member Login Script
Php Jabbers php Event Calendar
Php Jabbers php Newsletter Script
Php Jabbers php Shopping Cart
Php Jabbers product Comparison Script
Php Jabbers property Listing Script
Php Jabbers rental Property Booking Calendar
Php Jabbers restaurant Booking System
Php Jabbers service Booking Script
Php Jabbers shuttle Booking Software
Php Jabbers taxi Booking Script
Php Jabbers ticket Support Script
Php Jabbers time Slots Booking Calendar
Php Jabbers travel Tours Script
Php Jabbers vacation Rental Script
Php Jabbers yacht Listing Script
References
Metrics cvssV4_0

{'score': 8.6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: CERT-PL

Published:

Updated: 2026-07-31T19:51:58.085Z

Reserved: 2025-12-09T19:10:43.240Z

Link: CVE-2025-67650

cve-icon Vulnrichment

Updated: 2026-07-31T19:51:53.949Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-31T17:30:17Z