HIGH🇵🇱 Wersja polska

CVE-2023-51319

CVSS 8.8v3.1pub. 2025-02-20upd. 2025-11-04

PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Phpjabbers Bus Reservation System

    APP
    Phpjabbers
    1.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-53877CRITICAL9.3PL ✓ten sam produkt

SQL injection w PHPJabbers Bus Reservation System 1.1 (parametr pickup_id)

CVE-2023-51316HIGH7.5ten sam produkt

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows atta...

CVE-2023-51318MEDIUM5.4ten sam produkt

PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "tit...

CVE-2023-4111MEDIUM4.3ten sam produkt

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by...

CVE-2024-57428CRITICAL9.3PL ✓ten sam vendor

Stored XSS w PHPJabbers Cinema Booking System v2.0