Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-51319

PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.

Published

2025-02-20T16:15:34.803

Last Modified

2025-11-04T19:16:18.490

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses

Type: Secondary
CWE-1236

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	phpjabbers	bus_reservation_system	1.1	Yes

References

https://packetstorm.news/files/id/176500 Exploit, Third Party Advisory, VDB Entry ([email protected])
https://www.phpjabbers.com/bus-reservation-system/#sectionDemo Product ([email protected])
http://packetstormsecurity.com/files/176500/PHPJabbers-Bus-Reservation-System-1.1-CSV-Injection.html (af854a3a-2127-422b-91ae-364da2661108)