High severity8.8NVD Advisory· Published Feb 19, 2025· Updated Jun 17, 2026
CVE-2023-51302
CVE-2023-51302
Description
PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:phpjabbers:hotel_booking_system:4.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpjabbers:hotel_booking_system:4.0:*:*:*:*:*:*:*
- (no CPE)range: 4.0
- PHPJabbers/Hotel Booking Systemdescription
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/176489/PHPJabbers-Hotel-Booking-System-4.0-CSV-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.phpjabbers.com/hotel-booking-system/nvdProduct
News mentions
0No linked articles in our index yet.