CVE-2024-13681

The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncodeadmingetoembed' function in all versions up to, and including, 2.9.1.6. This makes it possible for unauthenticated attackers to read arbitrary files on the server...

CVE-2023-51320

PHPJabbers Night Club Booking Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

CVE-2023-51320

PHPJabbers Night Club Booking Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

PT-2025-7302 · Phpjabbers · Phpjabbers Bus Reservation System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Bus Reservation System version 1.1 Description: The issue allows an attacker to execute remote code due to insufficient input validation in the Languages section Labels any parameters field in System Options, which is used to...

CVE-2023-51331

PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

CVE-2023-51333

PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51331

CVE-2023-51331 affects PHPJabbers Cleaning Business Software v1.0. The vulnerability is a CSV Injection flaw that enables remote code execution by crafting a CSV payload via the Reservations list, specifically exploiting the Unique ID field used when exporting CSV data. Exploitation steps documen...

CVE-2023-51324

PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

CVE-2023-51336

PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

CVE-2023-51324

CVE-2023-51324 affects PHPJabbers Shared Asset Booking System v1.0. The vulnerability is a CSV injection flaw caused by insufficient input validation in the Languages section Labels/parameters field within System Options, which is used to build CSV exports. Exploitation could allow an attacker to...

CVE-2023-51319

The CVE-2023-51319 issue affects PHPJabbers Bus Reservation System v1.1. The vulnerability arises from insufficient input validation in the Languages section (Labels) within System Options, which is used to construct CSV files. This CSV injection can be triggered when exporting data, enabling an ...

CVE-2023-51311

PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51336

PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

CVE-2023-51320

CVE-2023-51320 affects PHPJabbers Night Club Booking Software v1.0. The vulnerability is a CSV Injection in the CSV export, caused by insufficient input validation on the Languages → Labels parameter (in System Options) used to construct the CSV file. The issue is evidenced by concrete exploitati...

CVE-2023-51311

PHPJabbers Car Park Booking System v3.0 is vulnerable to a CSV injection that can lead to remote code execution due to insufficient input validation in the Languages section (Labels field) used to construct CSV files. Documented in CVE-2023-51311 and multiple sources (NVD, RH, CVE List, PacketSto...

CVE-2023-51313

PHPJabbers Restaurant Booking System v3.0 is affected by a CSV Injection vulnerability. The issue stems from insufficient input validation in the Languages section Labels any parameters field in System Options, which is used to construct CSV files (as described in public advisories and exploit de...

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection due to insufficient input validation on the Languages section Labels field in System Options used to construct CSV files, potentially enabling remote code execution via crafted CSV payloads. Public writeups (e.g., PacketStorm) ...

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...

CVE-2023-51302

PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...