CVE Catalog
CVE-2023-36134
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.42%
33th percentile - higher than 33% of all known CVEs
Summary
In PHP Jabbers Class Scheduling System version 1.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts.
Risk Assessment
Account takeover by an attacker may lead to unauthorized access to user data and private information, posing a significant security risk to the organization.
Recommendation
It is recommended to implement identity verification mechanisms for users when changing their email address and password to prevent unauthorized changes.
Original NVD description (English source)
In PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.