Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-51333

PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.

Published

2025-02-20T18:15:24.077

Last Modified

2025-11-04T19:16:20.430

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses

Type: Secondary
CWE-1236

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	phpjabbers	cinema_booking_system	1.0	Yes

References

https://packetstorm.news/files/id/176511 Third Party Advisory, VDB Entry ([email protected])
https://www.phpjabbers.com/cinema-booking-system/#sectionDemo Product ([email protected])
http://packetstormsecurity.com/files/176511/PHPJabbers-Cinema-Booking-System-1.0-CSV-Injection.html (af854a3a-2127-422b-91ae-364da2661108)
https://packetstorm.news/files/id/176511 Third Party Advisory, VDB Entry (134c704f-9b21-4f2e-91b3-4a467353bcc0)