2404 matches found
CVE-2020-25398
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...
Design/Logic Flaw
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...
CVE-2020-25398
CVE-2020-25398 affects InterMind iMind Server up to version 3.13.65, via the csv export function. The root cause is CSV Injection in exported CSV data. CVSS-3.1 vector indicates Network attack, high impact to confidentiality, integrity, and availability (base 8.8). Practical exploitation details ...
CVE-2020-25398
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...
phpMyAdmin CSV Injection Vulnerability
phpMyAdmin is a free, web-based MySQL database management tool from the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A CSV injection vulnerability exists in phpMyAdmin 5.0.2 and...
CVE-2020-26507: Improper Neutralization of Formula Elements in a CSV File
A CSV Injection also known as Formula Injection vulnerability in the Marmind web application with version 4.1.141.0 allows malicious users to gain remote control of other computers. By providing formula code in the “Notes” functionality in the main screen, an attacker can inject a payload into th...
PT-2020-16076
Name of the Vulnerable Software and Affected Versions InterMind iMind Server versions through 3.13.65 Description The issue exists in the csv export functionality, allowing for CSV Injection. Recommendations For versions through 3.13.65, update to a version that contains a fix for this issue, as...
PT-2020-16428
Name of the Vulnerable Software and Affected Versions Marmind web application version 4.1.141.0 Description A CSV Injection vulnerability in the Marmind web application allows malicious users to gain remote control of other computers. By providing formula code in the "Notes" functionality, an...
CVE-2020-25398: Improper Neutralization of Formula Elements in a CSV File
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality...
CVE-2020-22274
JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...
CVE-2020-22274
JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...
Design/Logic Flaw
JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...
CVE-2020-22277
Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile...
CVE-2020-22278
phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...
CVE-2020-22278
phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...
CVE-2020-22277
Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile...
CVE-2020-22276
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...
CVE-2020-22276
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...
Design/Logic Flaw
phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...