1966 matches found
CVE-2023-51311
PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51311
PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51336
PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...
CVE-2023-51313
PHPJabbers Restaurant Booking System v3.0 is affected by a CSV Injection vulnerability. The issue stems from insufficient input validation in the Languages section Labels any parameters field in System Options, which is used to construct CSV files (as described in public advisories and exploit de...
CVE-2023-51336
The CVE-2023-51336 entry affects PHPJabbers Meeting Room Booking System v1.0. The vulnerability stems from insufficient input validation in the Languages section Labels parameter of System Options, which is used to construct CSV files. This CSV Injection can enable remote code execution and has a...
CVE-2023-51302
PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51298
PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51298
PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51298
PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection due to insufficient input validation on the Languages section Labels field in System Options used to construct CSV files, potentially enabling remote code execution via crafted CSV payloads. Public writeups (e.g., PacketStorm) ...
CVE-2023-51298
PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51302
PHPJabbers Hotel Booking System v4.0 is vulnerable to a CSV Injection flaw. The root cause is insufficient input validation on the Languages/Labels parameters used to construct CSV files, specifically in the Reservations list (Unique ID field). This can allow an attacker to execute remote code vi...
CVE-2023-51302
PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2023-51302
PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...
CVE-2024-34448
Ghost before 5.82.0 allows CSV Injection during a member CSV export...
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
ELADMIN 安全漏洞
ELADMIN is a backend management system for elunez individual developers. A security vulnerability exists in ELADMIN 2.7 and earlier versions, which stems from a CSV injection issue in the Exception Log Download module...