CVE-2023-48835

Car Rental Script v3.0 is vulnerable to CSV Injection via a Language Labels Export action...

CVE-2023-48835

Car Rental Script v3.0 is vulnerable to CSV Injection via a Language Labels Export action...

CVE-2023-48830

Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...

CVE-2023-48835

Car Rental Script v3.0 is vulnerable to CSV Injection via a Language Labels Export action...

CVE-2023-48830

Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...

Input validation

Car Rental Script v3.0 is vulnerable to CSV Injection via a Language Labels Export action...

Input validation

Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language Labels Export action...

Input validation

Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...

Shuttle Booking Software Security Breach

Shuttle Booking Software is a PHP Jabbers open source shuttle booking software. A security vulnerability exists in Shuttle Booking Software version 2.0, which stems from a CSV injection vulnerability in the Languages selection function when exporting...

CVE-2023-48830: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...

CVE-2023-48841: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language Labels Export action...

CVE-2023-48835

CVE-2023-48835 affects Car Rental Script v3.0; the vulnerability is a CSV Injection in the Language > Labels > Export action due to insufficient input validation on the Unique ID field in Reservations. Impact is high (C:H, I:H, A:H) with CVSS 3.1 base score 8.8. In-the-wild/exploit details ...

CVE-2023-48841

CVE-2023-48841 affects PHPJabbers Appointment Scheduler 3.0. The vulnerability is a CSV injection in the Language > Labels > Export action, caused by insufficient input validation on the Unique ID field used to construct the CSV file. Impact is described as high (C/H/I/H/A/H) per CVSS data,...

Appointment Scheduler Security Vulnerability

PHPJabbers Appointment Scheduler is a Php-based appointment scheduler plugin for planning time and booking meeting schedules from PHPJabbers Serbia. A security vulnerability exists in Appointment Scheduler version 3.0, which stems from a CSV injection vulnerability in the Language Labels Export...

CVE-2023-48830

Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...

PT-2023-30984 · Unknown · Appointment Scheduler

Name of the Vulnerable Software and Affected Versions: Appointment Scheduler version 3.0 Description: The issue concerns a CSV Injection vulnerability via the Language Labels Export action. This allows for potential code execution. Recommendations: For Appointment Scheduler version 3.0, update to...

CVE-2023-48841

Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language Labels Export action...

CVE-2023-48830

Shuttle Booking Software 2.0 is affected by CVE-2023-48830 due to CSV injection in the Languages section during export. The root cause is insufficient input validation on the Unique ID field in the Reservations list used to construct CSV exports. Impact is exposure of injected content in exported...

PT-2023-30978 · Unknown · Car Rental Script

Name of the Vulnerable Software and Affected Versions: Car Rental Script version 3.0 Description: The issue concerns a CSV Injection vulnerability. It can be exploited via the Language Labels Export action. Recommendations: For Car Rental Script version 3.0, consider disabling the Export action i...

Car Rental Script Security Vulnerability

Car Rental Script is an open source vehicle rental script from GZ Script. A security vulnerability exists in Car Rental v3.0, which originates from a CSV injection vulnerability in the Language Labels Export operation...