5374 matches found
CVE-2019-20385
The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...
CVE-2019-20385
The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...
Design/Logic Flaw
The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...
CVE-2019-20385
The CSV upload feature in /supervisor/procesacarga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/ content type. The PHP code can then be executed by visiting a /supervisor/csv/ URI...
CVE-2019-20385
CVE-2019-20385 affects Logaritmo Aware CallManager 2012 devices. The vulnerability arises from the CSV upload feature in /supervisor/procesa_carga.php, which allows uploading of .php files with a text/* content type. The uploaded PHP code can then be executed by accessing /supervisor/csv/. Red Ha...
TeleGram-Scraper - Telegram Group Scraper Tool (Fetch All Information About Group Members)
Telegram Group Scraper Tool. Fetch All Information About Group Members • How To Install & Setup API Termux • API Setup Go to http://my.telegram.org and log in. Click on API development tools and fill the required fields. put app name you want & select other in platform Example : copy "apiid" &...
Flamingo < 2.1.1 - CSV Injection
The Flamingo WordPress plugin was affected by a CSV Injection security vulnerability...
January 14, 2020—KB4534288 (Security-only update)
None None...
January 14, 2020—KB4534306 (OS Build 10240.18453)
None None...
WordPress TablePress Plugin < 1.10 CSV Injection Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112685";...
CVE-2019-20184
KeePass 2.4.1 allows CSV injection in the title field of a CSV export...
CVE-2019-20184
KeePass 2.4.1 allows CSV injection in the title field of a CSV export...
CVE-2019-20184
KeePass 2.4.1 allows CSV injection in the title field of a CSV export...
Design/Logic Flaw
KeePass 2.4.1 allows CSV injection in the title field of a CSV export...
CVE-2019-20180
The TablePress plugin 1.9.2 for WordPress allows tablepressdata CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application that opens the CSV file and not TablePress...
CVE-2019-20180
The TablePress plugin 1.9.2 for WordPress allows tablepressdata CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application that opens the CSV file and not TablePress...
Design/Logic Flaw
The TablePress plugin 1.9.2 for WordPress allows tablepressdata CSV injection by Editor users...
CVE-2019-20184
KeePass 2.4.1 allows CSV injection in the title field of a CSV export...
CVE-2019-20184
CVE-2019-20184 affects KeePass 2.4.1 and concerns CSV injection in the title field of a CSV export. The connected documents consistently describe this issue for KeePass 2.4.1, but do not provide specifics on the root cause beyond classifying it as a CSV injection vulnerability, nor details on aff...
