CVE-2023-51311

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Feb 20, 2025
Updated: Feb 24, 2025
CWE ID 1236

Summary

CVE-2023-51311: A significant vulnerability has been identified in PHPJabbers Car Park Booking System v3.0. This issue stems from insufficient input validation, enabling CSV Injection attacks. An attacker can exploit this weakness to execute remote code, posing a serious threat to system security. The vulnerability lies within the Languages section's Labels any parameters field in System Options, which is utilized to construct CSV files.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share