CVE-2023-51298 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists du…
Medium CVSS: 4.7

CVE-2023-51298

PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.
Vendor
Phpjabbers
Product
Event Booking Calendar
CWE
CWE-1236
Yayın Tarihi
2025-02-19 20:15:34
Güncelleme
2025-04-22 20:01:27
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-1236 Event Booking Calendar MEDIUM Phpjabbers 2025

Referanslar

http://packetstormsecurity.com/files/176487/PHPJabbers-Event-Booking-Calendar-4.0-CSV-Injection.html https://www.phpjabbers.com/event-booking-calendar/#sectionDemo