Lucene search
+L

243 matches found

osv_cve
osv_cve
•added 2023/12/07 7:15 a.m.•20 views

CVE-2023-48207

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component...

8.8CVSS5.8AI score0.01166EPSS
SaveExploits3References1
Prion
Prion
•added 2023/12/07 7:15 a.m.•30 views

Design/Logic Flaw

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component...

6.5CVSS7.6AI score0.01166EPSS
SaveExploits3References1Affected Software1
Prion
Prion
•added 2023/12/07 7:15 a.m.•26 views

Input validation

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List...

6.5CVSS7.4AI score0.01201EPSS
SaveExploits2References2Affected Software1
CVE
CVE
•added 2023/12/07 12:00 a.m.•70 views

CVE-2023-48207

CVE-2023-48207 affects PHPJabbers Availability Booking Calendar version 5.0. The vulnerability arises from insufficient input validation in the unique ID field used to build CSV exports from the Reservations list component, enabling CSV injection. Public sources describe potential remote code exe...

8.8CVSS8.9AI score0.01166EPSS
SaveExploits3References1Affected Software1
Cvelist
Cvelist
•added 2023/12/07 12:00 a.m.•58 views

CVE-2023-48207

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component...

9.2AI score0.01166EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/07 12:00 a.m.•5 views

CVE-2023-48826: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List...

8.8CVSS7.8AI score0.01201EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/07 12:00 a.m.•6 views

CVE-2023-48207: Improper Neutralization of Formula Elements in a CSV File

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component...

8.8CVSS7.8AI score0.01166EPSS
SaveExploits3References2
Cvelist
Cvelist
•added 2023/12/07 12:00 a.m.•36 views

CVE-2023-48826

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List...

9AI score0.01201EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2023/12/06 12:00 a.m.•6 views

PT-2023-30970

Name of the Vulnerable Software and Affected Versions Time Slots Booking Calendar version 4.0 Description The issue concerns a CSV Injection vulnerability via the unique ID field of the Reservations List. This allows for potential exploitation. No information is provided about the estimated numbe...

8.8CVSS5.8AI score0.01201EPSS
SaveExploits2References6
Packet Storm
Packet Storm
•added 2023/12/04 12:00 a.m.•494 views

PHPJabbers Shuttle Booking Software 2.0 CSV Injection

Exploit Title: PHPJabbers Shuttle Booking Software v2.0 - CSV Injection Date: 19/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/shuttle-booking-software/ Version: v2.0 Tested on: Windows 10...

7.4AI score0.01201EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2023/12/04 12:00 a.m.•337 views

PHPJabbers Appointment Scheduler 3.0 CSV Injection

Exploit Title: PHPJabbers Appointment Scheduler v3.0 - CSV Injection Date: 19/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/appointment-scheduler/ Version: v3.0 Tested on: Windows 10,...

7.4AI score0.01221EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2023/11/20 12:00 a.m.•425 views

PHPJabbers Availability Booking Calendar 5.0 CSV Injection

Exploit Title: PHPJabbers Availability Booking Calendar v5.0 - CSV Injection Date: 12/11/2023 Exploit Author: BugsBD Security Researcher Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/availability-booking-calendar/sectionDemo Version: v5.0...

7.5AI score0.01166EPSS
SaveExploits3
NVD
NVD
•added 2023/11/07 8:15 a.m.•46 views

CVE-2023-42541

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id...

5.3CVSS4.6AI score0.00379EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/11/07 8:15 a.m.•22 views

CVE-2023-42541

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id...

5.3CVSS5.8AI score0.00379EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/07 8:15 a.m.•30 views

Authorization

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id...

5CVSS7AI score0.00379EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/07 7:49 a.m.•12 views

CVE-2023-42541

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id...

4CVSS7.1AI score0.00379EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/11/07 7:49 a.m.•52 views

CVE-2023-42541

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id...

4CVSS5.5AI score0.00379EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/07 12:00 a.m.•13 views

CVE-2023-42541: Incorrect Authorization

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id...

5.3CVSS6AI score0.00379EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/11/07 12:00 a.m.•16 views

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to version 3.4.10, which stems from improper authorization in the PushClientProvider o...

5.3CVSS6.7AI score0.00379EPSS
SaveExploits0References2
Circl
Circl
•added 2023/07/27 10:28 p.m.•21 views

CVE-2023-38495

creationtimestamp| type| source ---|---|--- 2023-07-27 22:28:49+00:00| seen| https://t.me/cibsecurity/67346 2026-07-08 04:00:06+00:00| seen| https://t.me/thepirates3a/871 2026-07-09 00:00:06+00:00| seen| https://t.me/thepirates3a/871 2026-07-11 19:00:05+00:00| seen| https://t.me/thepirates3a/871...

9.8CVSS7AI score0.00836EPSS
SaveExploits1References2
Rows per page
Query Builder