CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51302

creationtimestamp| type| source ---|---|--- 2025-02-19 23:46:08+00:00| seen| https://t.me/cvedetector/18484 2025-02-20 00:17:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likz7jp7cs2a 2025-02-20 01:27:45+00:00| seen| Telegram/TrPtfVo3yQz482QeI37EiVcF7NGIhJfvb9AT8nrNz8FU9I0i...

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to a CSV Injection vulnerability (CWE-1236) that may allow an attacker to execute remote code. The root cause is insufficient input validation within the Languages section Labels ; specifically, any parameters field in System Options used to cons...

PHPJabbers Hotel Booking System 4.0 CSV Injection

Exploit Title: PHPJabbers Hotel Booking System v4.0 - CSV Injection Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/hotel-booking-system/sectionDemo Version: v4.0 Tested on: Windows...