<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-18T05:46:40.696186+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aa649086-593f-4916-80af-7a1d39e58c4c/export</id>
    <title>aa649086-593f-4916-80af-7a1d39e58c4c</title>
    <updated>2026-06-18T05:46:41.065070+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aa649086-593f-4916-80af-7a1d39e58c4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36313", "type": "seen", "source": "https://t.me/cibsecurity/68231", "content": "\u203c CVE-2023-36313 \u203c\n\nPHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting (XSS) via all post parameters of \"Export Requests\" aside from \"request_feed\".\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T20:15:51.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aa649086-593f-4916-80af-7a1d39e58c4c/export"/>
    <published>2023-08-10T20:15:51+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c990cdfc-5db5-4e4b-8d68-2cf3cfa9f6df/export</id>
    <title>c990cdfc-5db5-4e4b-8d68-2cf3cfa9f6df</title>
    <updated>2026-06-18T05:46:41.065000+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c990cdfc-5db5-4e4b-8d68-2cf3cfa9f6df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36311", "type": "seen", "source": "https://t.me/cibsecurity/68233", "content": "\u203c CVE-2023-36311 \u203c\n\nThere is a SQL injection (SQLi) vulnerability in the \"column\" parameter of index.php in PHPJabbers Document Creator v1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T20:15:53.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c990cdfc-5db5-4e4b-8d68-2cf3cfa9f6df/export"/>
    <published>2023-08-10T20:15:53+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9bc60edc-ca2b-40ca-80b9-60507ddf7563/export</id>
    <title>9bc60edc-ca2b-40ca-80b9-60507ddf7563</title>
    <updated>2026-06-18T05:46:41.064930+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9bc60edc-ca2b-40ca-80b9-60507ddf7563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36310", "type": "seen", "source": "https://t.me/cibsecurity/68234", "content": "\u203c CVE-2023-36310 \u203c\n\nThere is a Cross Site Scripting (XSS) vulnerability in the \"column\" parameter of index.php in PHPJabbers Document Creator v1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T20:15:54.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9bc60edc-ca2b-40ca-80b9-60507ddf7563/export"/>
    <published>2023-08-10T20:15:54+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f59a3328-f1f5-4d2d-b777-a1f40ee37f53/export</id>
    <title>f59a3328-f1f5-4d2d-b777-a1f40ee37f53</title>
    <updated>2026-06-18T05:46:41.064856+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f59a3328-f1f5-4d2d-b777-a1f40ee37f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36314", "type": "seen", "source": "https://t.me/cibsecurity/68235", "content": "\u203c CVE-2023-36314 \u203c\n\nThere is a Cross Site Scripting (XSS) vulnerability in the value-text-o_sms_email_request_message parameters of index.php in PHPJabbers Callback Widget v1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T20:15:55.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f59a3328-f1f5-4d2d-b777-a1f40ee37f53/export"/>
    <published>2023-08-10T20:15:55+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7f4deda5-75f3-4273-941e-6f6db096a233/export</id>
    <title>7f4deda5-75f3-4273-941e-6f6db096a233</title>
    <updated>2026-06-18T05:46:41.064782+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7f4deda5-75f3-4273-941e-6f6db096a233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36315", "type": "seen", "source": "https://t.me/cibsecurity/68236", "content": "\u203c CVE-2023-36315 \u203c\n\nThere is a Cross Site Scripting (XSS) vulnerability in the \"action\" parameter of index.php in PHPJabbers Callback Widget v1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T20:15:59.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7f4deda5-75f3-4273-941e-6f6db096a233/export"/>
    <published>2023-08-10T20:15:59+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/77221387-67d8-42d8-ba0a-963b242f3100/export</id>
    <title>77221387-67d8-42d8-ba0a-963b242f3100</title>
    <updated>2026-06-18T05:46:41.064706+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "77221387-67d8-42d8-ba0a-963b242f3100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36312", "type": "seen", "source": "https://t.me/cibsecurity/68238", "content": "\u203c CVE-2023-36312 \u203c\n\nThere is a Cross Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php in PHPJabbers Callback Widget v1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T20:16:01.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/77221387-67d8-42d8-ba0a-963b242f3100/export"/>
    <published>2023-08-10T20:16:01+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/610c2157-da52-4ced-9533-9f232767b308/export</id>
    <title>610c2157-da52-4ced-9533-9f232767b308</title>
    <updated>2026-06-18T05:46:41.064626+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "610c2157-da52-4ced-9533-9f232767b308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36317", "type": "seen", "source": "https://t.me/cibsecurity/69102", "content": "\u203c CVE-2023-36317 \u203c\n\nCross Site Scripting (XSS) vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T02:12:51.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/610c2157-da52-4ced-9533-9f232767b308/export"/>
    <published>2023-08-24T02:12:51+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/95f8327f-eba8-49b3-83f9-916f3c9745f8/export</id>
    <title>95f8327f-eba8-49b3-83f9-916f3c9745f8</title>
    <updated>2026-06-18T05:46:41.064511+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "95f8327f-eba8-49b3-83f9-916f3c9745f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36319", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5161", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aexp4CVE-2023-36319\nURL\uff1ahttps://github.com/Lowalu/CVE-2023-36319\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-09-19T08:21:08.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/95f8327f-eba8-49b3-83f9-916f3c9745f8/export"/>
    <published>2023-09-19T08:21:08+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/74661d0e-32dc-438e-b3a1-5d38c5aa179b/export</id>
    <title>74661d0e-32dc-438e-b3a1-5d38c5aa179b</title>
    <updated>2026-06-18T05:46:41.062238+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "74661d0e-32dc-438e-b3a1-5d38c5aa179b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36319", "type": "seen", "source": "https://t.me/cibsecurity/70765", "content": "\u203c CVE-2023-36319 \u203c\n\nFile Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute arbitrary code via the action parameter of the compress-inc.php file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T07:30:08.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/74661d0e-32dc-438e-b3a1-5d38c5aa179b/export"/>
    <published>2023-09-20T07:30:08+00:00</published>
  </entry>
</feed>
