Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-51311

PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.

Published

2025-02-20T15:15:12.170

Last Modified

2025-11-04T19:16:17.327

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses

Type: Secondary
CWE-1236

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	phpjabbers	car_park_booking_system	3.0	Yes

References

https://packetstorm.news/files/id/176494 Exploit, Third Party Advisory ([email protected])
https://www.phpjabbers.com/car-park-booking/#sectionDemo Product ([email protected])
http://packetstormsecurity.com/files/176494/PHPJabbers-Car-Park-Booking-System-3.0-CSV-Injection.html (af854a3a-2127-422b-91ae-364da2661108)
https://packetstorm.news/files/id/176494 Exploit, Third Party Advisory (134c704f-9b21-4f2e-91b3-4a467353bcc0)