CVE-2023-51333

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Feb 20, 2025
Updated: Feb 21, 2025
CWE ID 1236

Summary

CVE-2023-51333: PHPJabbers Cinema Booking System version 1.0 is found to have a CSV Injection vulnerability. This issue arises due to insufficient input validation in the Languages section's Labels any parameters field in System Options, which is utilized to create CSV files. An attacker can exploit this flaw to inject malicious code and execute it remotely.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share