deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-6393
Published: 2023-12-06
Description: A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contains sensitive information, and could allow a malicious user to benefit from a POST request returning the response that is meant for another user, gaining access to sensitive data.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/errata/RHSA-2023:7700; https://access.redhat.com/security/cve/CVE-2023-6393; https://bugzilla.redhat.com/show_bug.cgi?id=2253113
CVE: CVE-2023-46751
Published: 2023-12-06
Description: An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://bugs.ghostscript.com/show_bug.cgi?id=707264; https://ghostscript.com/; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=dcdbc595c13c9d11d235702dff46bb74c80f7698
CVE: CVE-2023-48123
Published: 2023-12-06
Description: An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the packet_capture.php file.
CVSS Score: 8.8 (HIGH)
References: https://docs.netgate.com/downloads/pfSense-SA-23_11.webgui.asc; https://github.com/pfsense/pfsense/commit/f72618c4abb61ea6346938d0c93df9078736b775; https://redmine.pfsense.org/issues/14809
CVE: CVE-2023-49096
Published: 2023-12-06
Description: Jellyfin is a Free Software Media System for managing and streaming media. In affected versions there is an argument injection in the VideosController, specifically the `/Videos/<itemId>/stream` and `/Videos/<itemId>/stream.<container>` endpoints which are present in the current Jellyfin version. Additional endpoints in the AudioController might also be vulnerable, as they differ only slightly in execution. Those endpoints are reachable by an unauthenticated user. In order to exploit this vulnerability an unauthenticated attacker has to guess an itemId, which is a completely random GUID. It’s a very unlikely case even for a large media database with lots of items. Without an additional information leak, this vulnerability shouldn’t be directly exploitable, even if the instance is reachable from the Internet. There are a lot of query parameters that get accepted by the method. At least two of those, videoCodec and audioCodec are vulnerable to the argument injection. The values can be traced through a lot of code and might be changed in the process. However, the fallback is to always use them as-is, which means we can inject our own arguments. Those arguments land in the command line of FFmpeg. Because UseShellExecute is always set to false, we can’t simply terminate the FFmpeg command and execute our own. It should only be possible to add additional arguments to FFmpeg, which is powerful enough as it stands. There is probably a way of overwriting an arbitrary file with malicious content. This vulnerability has been addressed in version 10.8.13. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.7 (HIGH)
CWE: CWE-88
References: https://cwe.mitre.org/data/definitions/88.html; https://en.wikipedia.org/wiki/Pass_the_hash; https://ffmpeg.org/ffmpeg-filters.html#drawtext-1
CVE: CVE-2023-46353
Published: 2023-12-06
Description: In the module "Product Tag Icons Pro" (ticons) before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The method TiconProduct::getTiconByProductAndTicon() has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2023/11/28/ticons.html; https://security.friendsofpresta.org/modules/2023/11/28/ticons.html
CVE: CVE-2023-46354
Published: 2023-12-06
Description: In the module "Orders (CSV, Excel) Export PRO" (ordersexport) < 5.2.0 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can access exports from the module which can lead to a leak of personal information from ps_customer/ps_address tables such as name / surname / email / phone number / full postal address.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://security.friendsofpresta.org/modules/2023/11/28/ordersexport.html; https://security.friendsofpresta.org/modules/2023/11/28/ordersexport.html
CVE: CVE-2023-6566
Published: 2023-12-07
Description: Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-840
References: https://github.com/microweber/microweber/commit/eee0c6771e152022a91089a547272c8a542bb74e; https://huntr.com/bounties/cf4b68b5-8d97-4d05-9cde-e76b1a414fd6; https://github.com/microweber/microweber/commit/eee0c6771e152022a91089a547272c8a542bb74e
CVE: CVE-2023-46218
Published: 2023-12-07
Description: This flaw allows a malicious HTTP server to set "super cookies" in curl that
are then passed back to more origins than what is otherwise allowed or
possible. This allows a site to set cookies that then would get sent to
different and unrelated sites and domains.

It could do this by exploiting a mixed case flaw in curl's function that
verifies a given cookie domain against the Public Suffix List (PSL). For
example a cookie could be set with `domain=co.UK` when the URL used a lower
case hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-178
References: https://curl.se/docs/CVE-2023-46218.html; https://hackerone.com/reports/2212193; https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
CVE: CVE-2023-5710
Published: 2023-12-07
Description: The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_constants() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve sensitive information such as database credentials.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/system-dashboard/tags/2.8.7/admin/class-system-dashboard-admin.php#L7930; https://plugins.trac.wordpress.org/browser/system-dashboard/tags/2.8.8/admin/class-system-dashboard-admin.php#L7951; https://www.wordfence.com/threat-intel/vulnerabilities/id/f170379e-e833-42e0-96fd-1e1722a8331c?source=cve
CVE: CVE-2023-5711
Published: 2023-12-07
Description: The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_php_info() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve sensitive information provided by PHP info.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/system-dashboard/tags/2.8.7/admin/class-system-dashboard-admin.php#L1925; https://plugins.trac.wordpress.org/browser/system-dashboard/tags/2.8.8/admin/class-system-dashboard-admin.php#L1932; https://research.cleantalk.org/cve-2023-5711/
CVE: CVE-2023-5712
Published: 2023-12-07
Description: The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_global_value() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve sensitive global value information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/system-dashboard/tags/2.8.7/admin/class-system-dashboard-admin.php#L7382; https://plugins.trac.wordpress.org/browser/system-dashboard/tags/2.8.8/admin/class-system-dashboard-admin.php#L7403; https://www.wordfence.com/threat-intel/vulnerabilities/id/70f14d9d-6ed6-4bcb-944d-f9c5aa6a17a6?source=cve
CVE: CVE-2023-5713
Published: 2023-12-07
Description: The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_option_value() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve potentially sensitive option values, and deserialize the content of those values.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/system-dashboard/tags/2.8.7/admin/class-system-dashboard-admin.php#L6341; https://plugins.trac.wordpress.org/browser/system-dashboard/tags/2.8.8/admin/class-system-dashboard-admin.php#L6357; https://research.cleantalk.org/cve-2023-5713/
CVE: CVE-2023-5714
Published: 2023-12-07
Description: The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_db_specs() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve data key specs.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/system-dashboard/tags/2.8.7/admin/class-system-dashboard-admin.php#L2942; https://plugins.trac.wordpress.org/browser/system-dashboard/tags/2.8.8/admin/class-system-dashboard-admin.php#L2949; https://www.wordfence.com/threat-intel/vulnerabilities/id/53b3ac83-847d-4bd0-a79b-531af266e1b4?source=cve
CVE: CVE-2023-5761
Published: 2023-12-07
Description: The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' parameter in versions 1.4.0 to 1.4.6.1 (free) and versions 1.4.0 to 1.5.0 (pro) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2976467%40burst-statistics&new=2976467%40burst-statistics&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/30f8419c-c7b9-4c68-a845-26c0308d76f3?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2976467%40burst-statistics&new=2976467%40burst-statistics&sfp_email=&sfph_mail=
CVE: CVE-2023-40238
Published: 2023-12-07
Description: A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address during the DXE phase of UEFI execution. This occurs because of an integer signedness error involving PixelHeight and PixelWidth during RLE4/RLE8 compression.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://binarly.io/posts/finding_logofail_the_dangers_of_image_parsing_during_system_boot/index.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.insyde.com/security-pledge
CVE: CVE-2023-28017
Published: 2023-12-07
Description: HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user after visiting the vulnerable URL which leads to executing malicious script code. This may let the attacker steal cookie-based authentication credentials and comprise a user's account then launch other attacks.

CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108264; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108264
CVE: CVE-2023-41106
Published: 2023-12-07
Description: An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.3. An attacker can gain access to a Zimbra account. This is also fixed in 9.0.0 Patch 35 and 8.8.15 Patch 42.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2023/11/17/2; https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2023-41913
Published: 2023-12-07
Description: strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/strongswan/strongswan/releases; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPJZPYHBCRXUQGGKQE6TYH4J4RIJH6HO/; https://www.strongswan.org/blog/2023/11/20/strongswan-vulnerability-%28cve-2023-41913%29.html
CVE: CVE-2023-6568
Published: 2023-12-07
Description: A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the user without adequate sanitization or escaping, leading to arbitrary JavaScript execution in the context of the victim's browser. The vulnerability is present in the mlflow/server/auth/__init__.py file, where the user-supplied Content-Type header is directly injected into a Python formatted string and returned to the user, facilitating the XSS attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/mlflow/mlflow/commit/28ff3f94994941e038f2172c6484b65dc4db6ca1; https://huntr.com/bounties/816bdaaa-8153-4732-951e-b0d92fddf709; https://github.com/mlflow/mlflow/commit/28ff3f94994941e038f2172c6484b65dc4db6ca1
CVE: CVE-2023-43102
Published: 2023-12-07
Description: An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be exploited to access the mailbox of an authenticated user. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://wiki.zimbra.com/wiki/Security_Center
CVE: CVE-2023-43103
Published: 2023-12-07
Description: An XSS issue was discovered in a web endpoint in Zimbra Collaboration (ZCS) before 10.0.4 via an unsanitized parameter. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://wiki.zimbra.com/wiki/Security_Center
CVE: CVE-2023-46307
Published: 2023-12-07
Description: An issue was discovered in server.js in etcd-browser 87ae63d75260. By supplying a /../../../ Directory Traversal input to the URL's GET request while connecting to the remote server port specified during setup, an attacker can retrieve local operating system files from the remote system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://seclists.org/fulldisclosure/2023/Nov/11; http://seclists.org/fulldisclosure/2023/Nov/9; https://hub.docker.com/r/buddho/etcd-browser
CVE: CVE-2023-46857
Published: 2023-12-07
Description: Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature. This occurs because there is an incomplete blacklist in the SVG inspection, allowing JavaScript in the SRC attribute of an IFRAME element. An authenticated attack with assets.create permission is required for exploitation.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2023/11/08/4; https://census-labs.com/news/2023/11/08/weak-svg-asset-filtering-mechanism-in-squidex-cms/; https://support.squidex.io/c/news/9
CVE: CVE-2023-46916
Published: 2023-12-07
Description: Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor.
CVSS Score: 4.3 (MEDIUM)
References: http://packetstormsecurity.com/files/175660; https://www.maximawatches.com/products/max-pro-power; http://packetstormsecurity.com/files/175660
CVE: CVE-2023-48172
Published: 2023-12-07
Description: A Cross Site Scripting (XSS) vulnerability in Shuttle Booking Software 2.0 allows a remote attacker to inject JavaScript via the name, description, title, or address parameter to index.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/175800; https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-48172; https://www.phpjabbers.com/shuttle-booking-software/
CVE: CVE-2023-43298
Published: 2023-12-07
Description: An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43298.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43298.md
CVE: CVE-2023-43299
Published: 2023-12-07
Description: An issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43299.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43299.md
CVE: CVE-2023-43300
Published: 2023-12-07
Description: An issue in urban_project mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 8.2 (HIGH)
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43300.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43300.md
CVE: CVE-2023-43301
Published: 2023-12-07
Description: An issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 8.2 (HIGH)
CWE: CWE-94
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43301.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43301.md
CVE: CVE-2023-43302
Published: 2023-12-07
Description: An issue in sanTas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 8.2 (HIGH)
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43302.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43302.md
CVE: CVE-2023-43303
Published: 2023-12-07
Description: An issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 8.2 (HIGH)
References: http://craftbeer.com; http://craftbeer.com
CVE: CVE-2023-43304
Published: 2023-12-07
Description: An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 8.2 (HIGH)
CWE: CWE-290
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43304.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43304.md
CVE: CVE-2023-48205
Published: 2023-12-07
Description: Jorani Leave Management System 1.0.2 allows a remote attacker to spoof a Host header associated with password reset emails.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-74
References: http://packetstormsecurity.com/files/175802; http://packetstormsecurity.com/files/175802
CVE: CVE-2023-48206
Published: 2023-12-07
Description: A Cross Site Scripting (XSS) vulnerability in GaatiTrack Courier Management System 1.0 allows a remote attacker to inject JavaScript via the page parameter to login.php or header.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/175803; http://packetstormsecurity.com/files/175803
CVE: CVE-2023-48207
Published: 2023-12-07
Description: Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: http://packetstormsecurity.com/files/175804; http://packetstormsecurity.com/files/175804
CVE: CVE-2023-48208
Published: 2023-12-07
Description: A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_api_key, plugin_sms_country_code, uuid, title, or country name parameter to index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/175805; http://packetstormsecurity.com/files/175805
CVE: CVE-2023-48823
Published: 2023-12-07
Description: A Blind SQL injection issue in ajax.php in GaatiTrack Courier Management System 1.0 allows an unauthenticated attacker to inject a payload via the email parameter during login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/176030; http://packetstormsecurity.com/files/176030
CVE: CVE-2023-48824
Published: 2023-12-07
Description: BoidCMS 2.0.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the title, subtitle, footer, or keywords parameter in a page=create action.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/176031; http://packetstormsecurity.com/files/176031
CVE: CVE-2023-48825
Published: 2023-12-07
Description: Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/176033; http://packetstormsecurity.com/files/176033
CVE: CVE-2023-48826
Published: 2023-12-07
Description: Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: http://packetstormsecurity.com/files/176034; https://www.phpjabbers.com/time-slots-booking-calendar/; http://packetstormsecurity.com/files/176034
CVE: CVE-2023-48827
Published: 2023-12-07
Description: Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/176036; https://www.phpjabbers.com/time-slots-booking-calendar/; http://packetstormsecurity.com/files/176036
CVE: CVE-2023-48828
Published: 2023-12-07
Description: Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/176037; https://www.phpjabbers.com/time-slots-booking-calendar/; http://packetstormsecurity.com/files/176037
CVE: CVE-2023-48830
Published: 2023-12-07
Description: Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: http://packetstormsecurity.com/files/176038; https://www.phpjabbers.com/shuttle-booking-software/; http://packetstormsecurity.com/files/176038