WordPress Comments Import & Export plugin <= 2.3.1 - CSV Injection vulnerability

CSV Injection vulnerability found by Bhushan B. Patil in WordPress Comments Import & Export plugin versions = 2.0.5. No fully patched version available...

WordPress Advanced Order Export For WooCommerce plugin <= 1.5.4 - CSV Injection vulnerability

CSV Injection vulnerability found by Bhushan Patil in WordPress Advanced Order Export For WooCommerce plugin versions = 1.5.4. Solution Update the WordPress Advanced Order Export For WooCommerce plugin to the latest available version at least 1.5.5...

WordPress Comments Import & Export <= 2.0.4 - CSV Injection

The WordPress Comments Import & Export WordPress plugin was affected by a CSV Injection security vulnerability...

WordPress Comments Import & Export CSV Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Comments Import & Export is used in one of the comments import/export plugin. A CSV injection vulnerability exists...

Advanced Order Export For WooCommerce CSV Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog website.Advanced Order Export For WooCommerce is used in one of the export WooCommerce order data plug-ins. plugin for...

Nikto CSV Injection Remote Code Execution (CVE-2018-11652)

A CSV Injection Vulnerability exists in Nikto 2.1.6. A successful attacker could inject arbitrary OS command directly into a CSV report. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Advanced Order Export For WooCommerce <= 1.5.4 - CSV Injection

The Advanced Order Export For WooCommerce WordPress plugin was affected by a CSV Injection security vulnerability...

CVE-2018-11526

The plugin "WordPress Comments Import & Export" for WordPress v2.0.4 and before is vulnerable to CSV Injection...

Input validation

The plugin "WordPress Comments Import & Export" for WordPress v2.0.4 and before is vulnerable to CSV Injection...

Input validation

The plugin "Advanced Order Export For WooCommerce" for WordPress v1.5.4 and before is vulnerable to CSV Injection...

CVE-2018-11525

The plugin "Advanced Order Export For WooCommerce" for WordPress v1.5.4 and before is vulnerable to CSV Injection...

CVE-2018-11526

CVE-2018-11526 affects the WordPress plugin Comments Import & Export (versions 2.0.4 and earlier). The vulnerability is a CSV injection flaw in the plugin when exporting data, enabling an attacker to inject commands via form fields. Public PoCs and exploit resources describe a remote command exec...

CVE-2018-11525

The plugin "Advanced Order Export For WooCommerce" for WordPress v1.5.4 and before is vulnerable to CSV Injection...

CVE-2018-11526

The plugin "WordPress Comments Import & Export" for WordPress v2.0.4 and before is vulnerable to CSV Injection...

CVE-2018-11525

CVE-2018-11525 affects the WordPress plugin Advanced Order Export For WooCommerce (versions ≤ 1.5.4). The vulnerability is a CSV Injection in exported order data, allowing an attacker to inject commands through form fields. Documentation indicates that when a user with higher privileges exports d...

CVE-2018-12530

An issue was discovered in MetInfo 6.0.0. admin/app/batch/csvup.php allows remote attackers to delete arbitrary files via a flienamecsv=../ directory traversal. This can be exploited via CSRF...

Nikto 2.1.6 CSV Injection

Exploit Title: Nikto 2.1.6 - CSV Injection Google Dork: N/A Date: 2018-06-01 Exploit Author: Adam Greenhill Vendor Homepage: https://cirt.net/Nikto2 Software Link: https://github.com/sullo/nikto Affected Version: 2.1.6, 2.1.5 Category: Applications Tested on: Kali Linux 4.14 x64 CVE :...

Nikto 2.1.6 - CSV Injection Vulnerability

Exploit for linux platform in category local exploits Exploit Title: Nikto 2.1.6 - CSV Injection Google Dork: N/A Exploit Author: Adam Greenhill Vendor Homepage: https://cirt.net/Nikto2 Software Link: https://github.com/sullo/nikto Affected Version: 2.1.6, 2.1.5 Category: Applications Tested on:...

Nikto 2.1.6 - CSV Injection

Nikto 2.1.6 - CSV Injection Exploit Title: Nikto 2.1.6 - CSV Injection Google Dork: N/A Date: 2018-06-01 Exploit Author: Adam Greenhill Vendor Homepage: https://cirt.net/Nikto2 Software Link: https://github.com/sullo/nikto Affected Version: 2.1.6, 2.1.5 Category: Applications Tested on: Kali Linu...

Nikto 2.1.6 - CSV Injection

Exploit Title: Nikto 2.1.6 - CSV Injection Google Dork: N/A Date: 2018-06-01 Exploit Author: Adam Greenhill Vendor Homepage: https://cirt.net/Nikto2 Software Link: https://github.com/sullo/nikto Affected Version: 2.1.6, 2.1.5 Category: Applications Tested on: Kali Linux 4.14 x64 CVE :...