CSV Injection Vulnerability in PHPJabbers Bus Reservation System
CVE-2023-51319

8.8HIGH

Key Information:

Vendor
PHPJabbers
Status
Bus Reservation System
Vendor
CVE Published:
20 February 2025

Summary

The PHPJabbers Bus Reservation System v1.1 is susceptible to a CSV Injection vulnerability stemming from inadequate input validation in the Languages section. An attacker can exploit this flaw through the Labels any parameters field in System Options, potentially leading to the execution of remote code when crafted CSV files are processed.

References

https://www.phpjabbers.com/bus-reservation-system/#sectio...
https://packetstorm.news/files/id/176500

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.