CVE-2023-48826

Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List.

• CWE-74

• https://packetstormsecurity.com/files/176034Exploit, Third Party Advisory, VDB Entry
• https://www.phpjabbers.com/time-slots-booking-calendar/Product
• https://packetstormsecurity.com/files/176034Exploit, Third Party Advisory, VDB Entry
• https://www.phpjabbers.com/time-slots-booking-calendar/Product

Published

Dec 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48813Senayan Library Management Systems (Slims) 9 Bulian v9.6.1 i…8.8
• CVE-2023-48815kkFileView v4.3.0 is vulnerable to Incorrect Access Control.6.1
• CVE-2023-4882DOS vulnerability that could allow an attacker to register a…7.5
• CVE-2023-48823A Blind SQL injection issue in ajax.php in GaatiTrack Courie…9.8
• CVE-2023-48824BoidCMS 2.0.1 is vulnerable to Multiple Stored Cross-Site Sc…5.4
• CVE-2023-48825Availability Booking Calendar 5.0 is vulnerable to Multiple …5.4
• CVE-2023-48827Time Slots Booking Calendar 4.0 is vulnerable to Multiple HT…5.4
• CVE-2023-48828Time Slots Booking Calendar 4.0 is vulnerable to Multiple St…5.4
• CVE-2023-4883 Invalid pointer release vulnerability. Exploitation of this…7.5
• CVE-2023-48830Shuttle Booking Software 2.0 is vulnerable to CSV Injection …8.8
• CVE-2023-48831A lack of rate limiting in pjActionAJaxSend in Availability …7.5
• CVE-2023-48833A lack of rate limiting in pjActionAJaxSend in Time Slots Bo…7.5