CitrusDB 0.3.6 - importcc.php CSV File SQL Injection

CitrusDB 0.3.6 - importcc.php CSV File SQL Injection source: https://www.securityfocus.com/bid/12557/info CitrusDB is reportedly affected by an access validation vulnerability during the upload of CSV files. Exploitation of this issue could result in path disclosure or SQL injection. The issue...

CVE-2005-0410

SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV file...

CVE-2004-1266

Buffer overflow in the getfieldheaders function in csv2xml.cpp for csv2xml 0.5.1 allows remote attackers to execute arbitrary code via a crafted CSV file...

CVE-2004-1266

Buffer overflow in the getfieldheaders function in csv2xml.cpp for csv2xml 0.5.1 allows remote attackers to execute arbitrary code via a crafted CSV file...