CVE-2023-48826

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List...

CVE-2023-48826

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List...

CVE-2023-48207

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component...

CVE-2023-48207

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component...

CVE-2023-48826: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List...

CVE-2023-48207: Improper Neutralization of Formula Elements in a CSV File

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component...

PT-2023-30970

Name of the Vulnerable Software and Affected Versions Time Slots Booking Calendar version 4.0 Description The issue concerns a CSV Injection vulnerability via the unique ID field of the Reservations List. This allows for potential exploitation. No information is provided about the estimated numbe...

PHPJabbers Shuttle Booking Software 2.0 CSV Injection

Exploit Title: PHPJabbers Shuttle Booking Software v2.0 - CSV Injection Date: 19/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/shuttle-booking-software/ Version: v2.0 Tested on: Windows 10...

PHPJabbers Availability Booking Calendar 5.0 CSV Injection

Exploit Title: PHPJabbers Availability Booking Calendar v5.0 - CSV Injection Date: 12/11/2023 Exploit Author: BugsBD Security Researcher Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/availability-booking-calendar/sectionDemo Version: v5.0...

CVE-2022-24983

Forms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. When chained with CVE-2022-24984, this could lead to unauthenticated remote code execution on the underlying web server. This occurs because the Unique...

PT-2022-17030

Name of the Vulnerable Software and Affected Versions JQueryForm.com versions prior to 2022-02-05 Description The issue allows remote attackers to obtain the URI to any uploaded file by capturing the POST response. This can be chained with another issue to potentially lead to unauthenticated remo...