5374 matches found
Input validation
myTinyTodo 1.3.3 through 1.4.3 allows CSV Injection. This is fixed in 1.5...
CVE-2019-13144
CVE-2019-13144 affects myTinyTodo versions 1.3.3 through 1.4.3. The vulnerability is CSV Injection, with a fix implemented in version 1.5. The provided sources flag this as a CSV injection issue in the affected range; no exploit details are included in the documents beyond the vulnerability class...
CVE-2019-13144
myTinyTodo 1.3.3 through 1.4.3 allows CSV Injection. This is fixed in 1.5...
CVE-2018-14861
Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users...
CVE-2018-14861
Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users...
CVE-2018-14861
Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users...
CVE-2018-14861
Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users...
CVE-2018-14861
An issue (CVE-2018-14861) affects Odoo Community 10.0/11.0 and Odoo Enterprise 10.0/11.0 where improper data access control allows authenticated users to export other users’ securely hashed passwords via CSV. Root cause: improper access controls on the CSV export feature. Impact: disclosure of pa...
LiveZilla < 8.0.1.1 Multiple Vulnerabilities
LiveZilla is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:livezilla:livezilla"; if...
LiveZilla Server CSV Injection Vulnerability
LiveZilla is a free online customer service system, based on PHP architecture, can run on Linux hosts or windows hosts, mainly divided into the client, server and server side LiveZilla Server. LiveZilla Server 8.0.1.1 before the version of the export function exists CSV injection vulnerability, a...
WordPress Import users from CSV with meta plugin <= 1.14.1.3 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found in WordPress Import users from CSV with meta plugin versions = 1.14.1.3. Solution Update the WordPress Import users from CSV with meta plugin to the latest available version at least 1.14.2.2...
CVE-2019-12961
LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function...
Input validation
LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function...
CVE-2019-12961
Affected software: LiveZilla Server prior to 8.0.1.1. Issue: CSV injection via the Export Function. Root cause: lack of input sanitization/export handling enabling CSV payloads in exported data. Impact (as described): vulnerability exists in the export feature; CVSS details are provided but the p...
CVE-2019-12961
LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function...
WordPress Shortlinks by Pretty Links plugin <= 2.1.9 - CSV injection vulnerability
CSV injection vulnerability found by Jerome Bruandet in WordPress Shortlinks by Pretty Links plugin versions = 2.1.9. Solution Update the WordPress Shortlinks by Pretty Links plugin to the latest available version at least 2.1.10...
Import users from CSV with meta <= 1.14.1.3 - CSRF leading to attachment deletion & Path Traversal
CSRF leading to attachment deletion via the acuideleteattachment AJAX function...
June 20, 2019—KB4503283 (Preview of Monthly Rollup)
None None...