Lucene search
China National Vulnerability DatabaseCNVD-2022-86336HistoryNov 23, 2022 - 12:00 a.m.
Event Registration App CSV Injection Vulnerability
2022-11-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
javascript
event registration
csv injection
vulnerability
carlo montero
developer
v1.0
improper use
formula elements
first name
contact
remarks
arbitrary code
crafted excel file
execute
EPSS
0.001
Percentile
36.3%
Event Registration App is a JavaScript application for registering event participants by Carlo Montero’s personal developer. v1.0 of the Carlo Montero Event Registration App is vulnerable to CSV injection, which stems from improper use of the formula elements in the First Name, Contact and Remarks fields, and can be exploited to execute arbitrary code via a crafted excel file to execute arbitrary code.
Related
nvd
nvd
CVE-2022-44830
2022-11-21 18:15:25
cve
cve
CVE-2022-44830
2022-11-21 18:15:25
prion
prion
Input validation
2022-11-21 18:15:00
cvelist
cvelist
CVE-2022-44830
2022-11-21 00:00:00