CVE-2025-67651

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Jul 31, 2026
Source updated: Jul 31, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

CSRF in PHP Jabbers scripts

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions, such as creating new admin accounts. This issue was fixed in the versions specified in the affected products list.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Appointment Scheduler

Vendor: PHP Jabbers
Product: Appointment Scheduler
Platforms: Unknown
Default status: unaffected

Appointment Scheduler · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.1	Unavailable	None listed

Bus Reservation System

Vendor: PHP Jabbers
Product: Bus Reservation System
Platforms: Unknown
Default status: unaffected

Bus Reservation System · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.1	Unavailable	None listed

Car Park Booking System

Vendor: PHP Jabbers
Product: Car Park Booking System
Platforms: Unknown
Default status: unaffected

Car Park Booking System · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.1	Unavailable	None listed

Car Rental Script

Vendor: PHP Jabbers
Product: Car Rental Script
Platforms: Unknown
Default status: unaffected

Car Rental Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.1	Unavailable	None listed

Cinema Booking System

Vendor: PHP Jabbers
Product: Cinema Booking System
Platforms: Unknown
Default status: unaffected

Cinema Booking System · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.1	Unavailable	None listed

Event Booking Calendar

Vendor: PHP Jabbers
Product: Event Booking Calendar
Platforms: Unknown
Default status: unaffected

Event Booking Calendar · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	5.1	Unavailable	None listed

Event Ticketing System

Vendor: PHP Jabbers
Product: Event Ticketing System
Platforms: Unknown
Default status: unaffected

Event Ticketing System · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.1	Unavailable	None listed

Hotel Booking System

Vendor: PHP Jabbers
Product: Hotel Booking System
Platforms: Unknown
Default status: unaffected

Hotel Booking System · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	5.1	Unavailable	None listed

Cleaning Business Software

Vendor: PHP Jabbers
Product: Cleaning Business Software
Platforms: Unknown
Default status: unaffected

Cleaning Business Software · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.1	Unavailable	None listed

Equipment Rental Script

Vendor: PHP Jabbers
Product: Equipment Rental Script
Platforms: Unknown
Default status: unaffected

Equipment Rental Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.1	Unavailable	None listed

Food Delivery Script

Vendor: PHP Jabbers
Product: Food Delivery Script
Platforms: Unknown
Default status: unaffected

Food Delivery Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.1	Unavailable	None listed

Member Login Script

Vendor: PHP Jabbers
Product: Member Login Script
Platforms: Unknown
Default status: unaffected

Member Login Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.1	Unavailable	None listed

Member Directory Script

Vendor: PHP Jabbers
Product: Member Directory Script
Platforms: Unknown
Default status: unaffected

Member Directory Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.1	Unavailable	None listed

Availability Calendar

Vendor: PHP Jabbers
Product: Availability Calendar
Platforms: Unknown
Default status: unaffected

Availability Calendar · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	6.1	Unavailable	None listed

PHP Event Calendar

Vendor: PHP Jabbers
Product: PHP Event Calendar
Platforms: Unknown
Default status: unaffected

PHP Event Calendar · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.1	Unavailable	None listed

PHP Newsletter Script

Vendor: PHP Jabbers
Product: PHP Newsletter Script
Platforms: Unknown
Default status: unaffected

PHP Newsletter Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	5.1	Unavailable	None listed

Product Comparison Script

Vendor: PHP Jabbers
Product: Product Comparison Script
Platforms: Unknown
Default status: unaffected

Product Comparison Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.1	Unavailable	None listed

Ticket Support Script

Vendor: PHP Jabbers
Product: Ticket Support Script
Platforms: Unknown
Default status: unaffected

Ticket Support Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.1	Unavailable	None listed

PHP Shopping Cart

Vendor: PHP Jabbers
Product: PHP Shopping Cart
Platforms: Unknown
Default status: unaffected

PHP Shopping Cart · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	6.0	Unavailable	None listed

Auto Classifieds Script

Vendor: PHP Jabbers
Product: Auto Classifieds Script
Platforms: Unknown
Default status: unaffected

Auto Classifieds Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.1	Unavailable	None listed

Business Directory Script

Vendor: PHP Jabbers
Product: Business Directory Script
Platforms: Unknown
Default status: unaffected

Business Directory Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.1	Unavailable	None listed

Availability Booking Calendar

Vendor: PHP Jabbers
Product: Availability Booking Calendar
Platforms: Unknown
Default status: unaffected

Availability Booking Calendar · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	6.1	Unavailable	None listed

Time Slots Booking Calendar

Vendor: PHP Jabbers
Product: Time Slots Booking Calendar
Platforms: Unknown
Default status: unaffected

Time Slots Booking Calendar · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	5.1	Unavailable	None listed

Restaurant Booking System

Vendor: PHP Jabbers
Product: Restaurant Booking System
Platforms: Unknown
Default status: unaffected

Restaurant Booking System · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.1	Unavailable	None listed

Shuttle Booking Software

Vendor: PHP Jabbers
Product: Shuttle Booking Software
Platforms: Unknown
Default status: unaffected

Shuttle Booking Software · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.1	Unavailable	None listed

Meeting Room Booking System

Vendor: PHP Jabbers
Product: Meeting Room Booking System
Platforms: Unknown
Default status: unaffected

Meeting Room Booking System · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.1	Unavailable	None listed

Rental Property Booking Calendar

Vendor: PHP Jabbers
Product: Rental Property Booking Calendar
Platforms: Unknown
Default status: unaffected

Rental Property Booking Calendar · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.1	Unavailable	None listed

Service Booking Script

Vendor: PHP Jabbers
Product: Service Booking Script
Platforms: Unknown
Default status: unaffected

Service Booking Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.1	Unavailable	None listed

Limo Booking Software

Vendor: PHP Jabbers
Product: Limo Booking Software
Platforms: Unknown
Default status: unaffected

Limo Booking Software · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.1	Unavailable	None listed

Taxi Booking Script

Vendor: PHP Jabbers
Product: Taxi Booking Script
Platforms: Unknown
Default status: unaffected

Taxi Booking Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.1	Unavailable	None listed

Job Listing Script

Vendor: PHP Jabbers
Product: Job Listing Script
Platforms: Unknown
Default status: unaffected

Job Listing Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.1	Unavailable	None listed

Property Listing Script

Vendor: PHP Jabbers
Product: Property Listing Script
Platforms: Unknown
Default status: unaffected

Property Listing Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.1	Unavailable	None listed

Travel Tours Script

Vendor: PHP Jabbers
Product: Travel Tours Script
Platforms: Unknown
Default status: unaffected

Travel Tours Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.1	Unavailable	None listed

Vacation Rental Script

Vendor: PHP Jabbers
Product: Vacation Rental Script
Platforms: Unknown
Default status: unaffected

Vacation Rental Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	5.1	Unavailable	None listed

Yacht Listing Script

Vendor: PHP Jabbers
Product: Yacht Listing Script
Platforms: Unknown
Default status: unaffected

Yacht Listing Script · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.1	Unavailable	None listed