2404 matches found
PT-2018-18881
Name of the Vulnerable Software and Affected Versions Open-AudIT versions prior to 2.2 Description The issue affects Open-AudIT, where a CSV injection is possible. Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue...
CVE-2018-8092
Mautic before 2.13.0 allows CSV injection...
CVE-2018-8092
Mautic before 2.13.0 allows CSV injection...
CVE-2018-8092
Mautic before 2.13.0 allows CSV injection...
CVE-2018-8092
CVE-2018-8092 affects Mautic prior to 2.13.0, enabling a CSV injection in exported contact lists. The issue is documented in multiple sources (e.g., GHSA-29V9-2FPX-J5G9 and OSV/GHSA advisories) with a fix recommended: update to 2.13.0 or later. The connected documents confirm the vulnerability is...
CVE-2018-8092: Improper Neutralization of Formula Elements in a CSV File
Mautic before 2.13.0 allows CSV injection...
PT-2018-18426
Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 2.13.0 Description: The issue allows for CSV injection with exported contact lists. This can be exploited when a user exports contact lists. Recommendations: For versions prior to 2.13.0, update to 2.13.0 or later...
Joomla Convert Forms version 2.0.3 - Formula Injection (CSV Injection) Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla Extension Convert Forms version 2.0.3 - Formula Injection CSV Injection Google Dork: N/A Exploit Author: Jetty Sairam Software Link:...
Command injection
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...
CVE-2018-10063
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...
CVE-2018-10063
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...
CVE-2018-10063
CVE-2018-10063 affects Joomla! Convert Forms extension prior to 2.0.4. The vulnerability is a CSV injection that enables remote command execution when exporting leads/form data, due to how CSV fields are handled during export. Documented impact includes potential arbitrary command execution with ...
Joomla Convert Forms 2.0.3 CSV Injection
Exploit Title: Joomla Extension Convert Forms version 2.0.3 - Formula Injection CSV Injection Google Dork: N/A Date: 12-04-2018 Exploit Author: Jetty Sairam Software Link: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/ Affected Version: 2.03 and befo...
Joomla Convert Forms version 2.0.3 - Formula Injection (CSV Injection)
Joomla Convert Forms version 2.0.3 - Formula Injection CSV Injection Exploit Title: Joomla Extension Convert Forms version 2.0.3 is vulnerable to Formula Injection CSV Injection Google Dork: N/A Date: 12-04-2018 Exploit Author: Jetty Sairam Software Link:...
CVE-2018-10063: Undefined Security Weakness
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...
PT-2018-9651
Name of the Vulnerable Software and Affected Versions: Convert Forms extension versions prior to 2.0.4 Description: The issue concerns a Remote Command Execution vulnerability using CSV Injection. This occurs when the software mishandles the export of a Leads file, allowing for potential...
Convert Forms, 2.0.3, CSV Injection
Convert Forms by Tassos.gr, versions 2.0.3 and previous, CSV Injection resolution: update to 2.0.4 update notice: https://www.tassos.gr/blog/convert-forms-2-0-4-security-release...
Joomla! Convert Forms version 2.0.3 - Formula Injection (CSV Injection)
Exploit Title: Joomla Extension Convert Forms version 2.0.3 is vulnerable to Formula Injection CSV Injection Google Dork: N/A Date: 12-04-2018 Exploit Author: Jetty Sairam Software Link: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/ Affected Version...
Passit: CSV-injection in export functionality
Summary: CSV-injection in export functionality Description: Hello team! I have found that you have a CSV-injection vulnerability in export functionality. First I thought that this is just fine but because you can group up this can be used against another users which makes this pretty critical...
Contact Form 7 to Database Extension 2.10.32 - CSV Injection
Note: The plugin has been closed on WP and moved to Github https://github.com/mdsimpson/contact-form-7-to-database-extension/releases...