Lucene search
+L

5270 matches found

Vulnrichment
Vulnrichment
added 2025/02/20 12:00 a.m.7 views

CVE-2023-51313

PHPJabbers Restaurant Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV fi...

8.8AI score0.00591EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2025/02/20 12:00 a.m.27 views

CVE-2023-51333

PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

0.008EPSS
SaveExploits1References2
CVE
CVE
added 2025/02/20 12:00 a.m.61 views

CVE-2023-51336

The CVE-2023-51336 entry affects PHPJabbers Meeting Room Booking System v1.0. The vulnerability stems from insufficient input validation in the Languages section Labels parameter of System Options, which is used to construct CSV files. This CSV Injection can enable remote code execution and has a...

8.8CVSS7.1AI score0.00621EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2025/02/20 12:00 a.m.63 views

CVE-2023-51313

PHPJabbers Restaurant Booking System v3.0 is affected by a CSV Injection vulnerability. The issue stems from insufficient input validation in the Languages section Labels any parameters field in System Options, which is used to construct CSV files (as described in public advisories and exploit de...

8.8CVSS8.8AI score0.00591EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/20 12:00 a.m.11 views

CVE-2023-51311

PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

7.7AI score0.00675EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2025/02/20 12:00 a.m.20 views

CVE-2023-51311

PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

0.00675EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2025/02/20 12:00 a.m.8 views

PT-2025-7296 · Phpjabbers · Phpjabbers Restaurant Booking System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Restaurant Booking System version 3.0 Description: The issue is related to a CSV Injection vulnerability that allows an attacker to execute remote code. This vulnerability exists due to insufficient input validation on the Language...

8.8CVSS7.6AI score0.00591EPSS
SaveExploits2References5
Vulnrichment
Vulnrichment
added 2025/02/20 12:00 a.m.12 views

CVE-2023-51336

PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

8.8AI score0.00621EPSS
SaveExploits1References2
CVE
CVE
added 2025/02/20 12:00 a.m.57 views

CVE-2023-51320

CVE-2023-51320 affects PHPJabbers Night Club Booking Software v1.0. The vulnerability is a CSV Injection in the CSV export, caused by insufficient input validation on the Languages → Labels parameter (in System Options) used to construct the CSV file. The issue is evidenced by concrete exploitati...

5.3CVSS5.6AI score0.00508EPSS
SaveExploits2References3Affected Software1
CVE
CVE
added 2025/02/20 12:00 a.m.64 views

CVE-2023-51311

PHPJabbers Car Park Booking System v3.0 is vulnerable to a CSV injection that can lead to remote code execution due to insufficient input validation in the Languages section (Labels field) used to construct CSV files. Documented in CVE-2023-51311 and multiple sources (NVD, RH, CVE List, PacketSto...

8.8CVSS7.1AI score0.00675EPSS
SaveExploits2References3Affected Software1
NVD
NVD
added 2025/02/19 9:15 p.m.23 views

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

8.8CVSS0.00601EPSS
SaveExploits2References2
NVD
NVD
added 2025/02/19 8:15 p.m.22 views

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

4.7CVSS0.004EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
added 2025/02/19 12:00 a.m.10 views

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

5.2AI score0.004EPSS
SaveExploits2References2
CVE
CVE
added 2025/02/19 12:00 a.m.51 views

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection due to insufficient input validation on the Languages section Labels field in System Options used to construct CSV files, potentially enabling remote code execution via crafted CSV payloads. Public writeups (e.g., PacketStorm) ...

4.7CVSS7.1AI score0.004EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2025/02/19 12:00 a.m.25 views

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

0.004EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
added 2025/02/19 12:00 a.m.10 views

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

8.8AI score0.00601EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2025/02/19 12:00 a.m.27 views

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

0.00601EPSS
SaveExploits2References2
CVE
CVE
added 2025/02/19 12:00 a.m.55 views

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to a CSV Injection flaw. The root cause is insufficient input validation on the Languages/Labels parameters used to construct CSV files, specifically in the Reservations list (Unique ID field). This can allow an attacker to execute remote code vi...

8.8CVSS7.1AI score0.00601EPSS
SaveExploits2References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/14 9:09 a.m.19 views

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

8.8CVSS7.1AI score0.00729EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/02/13 9:03 p.m.28 views

CVE-2023-5122

Grafana is an open-source platform for monitoring and observability. The CSV datasource plugin is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing CSV data from a remote endpoint configured by an administrator. If this plugin was configured to send requests t...

5.3CVSS6.7AI score0.00509EPSS
SaveExploits0References4
Rows per page
Query Builder