HIGH🇵🇱 Wersja polska

CVE-2023-51319

CVSS 8.8v3.1pub. 2025-02-20upd. 2025-11-04

PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Phpjabbers Bus Reservation System

    APP
    Phpjabbers
    1.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-53877CRITICAL9.3PL ✓same product

SQL injection w PHPJabbers Bus Reservation System 1.1 (parametr pickup_id)

CVE-2023-51316HIGH7.5same product

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows atta...

CVE-2023-51318MEDIUM5.4same product

PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "tit...

CVE-2023-4111MEDIUM4.3same product

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by...

CVE-2024-57428CRITICAL9.3PL ✓same vendor

Stored XSS w PHPJabbers Cinema Booking System v2.0