Lucene search
+L

2404 matches found

CVE
CVE
•added 2025/02/20 12:00 a.m.•70 views

CVE-2023-51333

The PHPJabbers Cinema Booking System v1.0 is vulnerable to a CSV Injection (CWE-1236) that allows for remote code execution . The root cause is insufficient input validation on the Labels parameter field within the Languages section of System Options , which is used to construct a CSV file. As a ...

8.8CVSS7.1AI score0.0083EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2025/02/20 12:00 a.m.•32 views

CVE-2023-51336

PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

0.00644EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/02/20 12:00 a.m.•5 views

PT-2025-7303

Name of the Vulnerable Software and Affected Versions PHPJabbers Night Club Booking Software version 1.0 Description The issue is related to a CSV injection vulnerability that allows an attacker to execute remote code. This vulnerability exists due to insufficient input validation in the Language...

5.3CVSS0.00527EPSS
SaveExploits2References7
CVE
CVE
•added 2025/02/20 12:00 a.m.•68 views

CVE-2023-51319

The PHPJabbers Bus Reservation System v1.1 is susceptible to a CSV Injection vulnerability. The root cause is insufficient input validation on the Labels any parameters field within the Languages section of the System Options , which is used to construct CSV files. This flaw can allow an attacker...

8.8CVSS8.8AI score0.007EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/20 12:00 a.m.•7 views

CVE-2023-51336: Improper Neutralization of Formula Elements in a CSV File

PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

8.8CVSS6.3AI score0.00644EPSS
SaveExploits1References1
CVE
CVE
•added 2025/02/20 12:00 a.m.•79 views

CVE-2023-51336

PHPJabbers Meeting Room Booking System v1.0 is vulnerable to a CSV Injection vulnerability, which can lead to remote code execution . The root cause is insufficient input validation on the Labels any parameters field within the Languages section of System Options , specifically where this field i...

8.8CVSS7.1AI score0.00644EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2025/02/20 12:00 a.m.•30 views

CVE-2023-51311

PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

0.00701EPSS
SaveExploits2References2
NVD
NVD
•added 2025/02/19 9:15 p.m.•28 views

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

8.8CVSS0.00613EPSS
SaveExploits2References2
NVD
NVD
•added 2025/02/19 8:15 p.m.•30 views

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

4.7CVSS0.00408EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2025/02/19 12:00 a.m.•32 views

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

0.00408EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2025/02/19 12:00 a.m.•34 views

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

0.00613EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2025/02/19 12:00 a.m.•11 views

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

8.8AI score0.00613EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/19 12:00 a.m.•5 views

CVE-2023-51302: Improper Neutralization of Formula Elements in a CSV File

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

8.8CVSS6.3AI score0.00613EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/19 12:00 a.m.•7 views

CVE-2023-51298: Improper Neutralization of Formula Elements in a CSV File

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

4.7CVSS6.3AI score0.00408EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2025/02/19 12:00 a.m.•3 views

PT-2025-7287

Name of the Vulnerable Software and Affected Versions PHPJabbers Hotel Booking System version 4.0 Description The PHPJabbers Hotel Booking System is affected by a CSV injection vulnerability, allowing an attacker to execute remote code. This issue exists due to insufficient input validation in th...

8.8CVSS0.00613EPSS
SaveExploits2References9
CVE
CVE
•added 2025/02/19 12:00 a.m.•60 views

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is susceptible to a CSV Injection vulnerability. The root cause is insufficient input validation on the Labels any parameters field within the Languages section of System Options , which is used to construct CSV files. This flaw could allow an attacker to ex...

4.7CVSS7.1AI score0.00408EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/02/19 12:00 a.m.•7 views

PT-2025-7283

Name of the Vulnerable Software and Affected Versions PHPJabbers Event Booking Calendar version 4.0 Description The issue exists due to insufficient input validation on the Languages section Labels any parameters field in System Options that is used to construct a CSV file, allowing an attacker t...

4.7CVSS0.00408EPSS
SaveExploits2References8
CVE
CVE
•added 2025/02/19 12:00 a.m.•68 views

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to a CSV Injection vulnerability (CWE-1236) that may allow an attacker to execute remote code. The root cause is insufficient input validation within the Languages section Labels ; specifically, any parameters field in System Options used to cons...

8.8CVSS7.1AI score0.00613EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/19 12:00 a.m.•12 views

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

5.2AI score0.00408EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2025/02/14 9:09 a.m.•22 views

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

8.8CVSS7.1AI score0.00729EPSS
SaveExploits2References1
Rows per page
Query Builder