746 matches found
PrestaShop Security Breach
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop baimporter versions prior to 1.1.28, which stems from a SQL...
Mapshaper Path Traversal Vulnerability
Mapshaper is a tool for editing Shapefile, GeoJSON, TopoJSON and CSV files. A path traversal vulnerability exists in Mapshaper versions prior to 0.6.44, which stems from a path traversal vulnerability in...
WordPress plugin Contact Form Entries Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
Hotel Booking System Security Breach
Hotel Booking System is a hotel booking system. A security vulnerability exists in PHPJabbers Hotel Booking System version 4.0, which stems from a CSV injection vulnerability...
Night Club Booking Software Security Breach
Night Club Booking Software is a PHPJabbers open source nightclub booking software. A security vulnerability exists in version 1.0 of Night Club Booking Software, which stems from a CSV injection vulnerability...
PHPJabbers Restaurant Booking System Security Vulnerability
PHPJabbers Restaurant Booking System is a restaurant booking system from the Serbian company PHPJabbers. A security vulnerability exists in PHPJabbers Restaurant Booking System version 3.0, which stems from a CSV injection vulnerability...
PHPJabbers Meeting Room Booking System Security Vulnerability
PHPJabbers Meeting Room Booking System is a meeting room booking system from the Serbian company PHPJabbers. A security vulnerability exists in PHPJabbers Meeting Room Booking System version 1.0, which originates from a CSV injection vulnerability...
PHPJabbers Cinema Booking System Security Vulnerability
PHPJabbers Cinema Booking System is a theater booking system from PHPJabbers. A security vulnerability exists in PHPJabbers Cinema Booking System version 1.0, which stems from a CSV injection vulnerability...
PHPJabbers Shared Asset Booking System Security Vulnerability
PHPJabbers Shared Asset Booking System is a shared asset booking system from PHPJabbers Serbia. A security vulnerability exists in PHPJabbers Shared Asset Booking System version 1.0, which stems from the presence of a CSV injection vulnerability...
CVE-2023-31296
CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows attackers to obtain sensitive information via the User Name field...
Sesami Cash Point & Transport Optimizer Security Vulnerability
Sesami Cash Point & Transport Optimizer is a solution from Sesami Corporation. A security vulnerability exists in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 that stems from the presence of a CSV injection vulnerability. The vulnerability allows an attacker to obtain sensitive...
Improper Neutralization of Formula Elements in a CSV File
Overview Affected versions of this package are vulnerable to Improper Neutralization of Formula Elements in a CSV File in csvbuilder.rb. An attacker can inject malicious formulas into CSV exports by submitting crafted input to the CSV export feature. Remediation Upgrade activeadmin to version 3.2...
Active Admin security vulnerability
Active Admin is Active Admin open source a Ruby on Rails framework . It is used to create the backend for website management. A security vulnerability exists in versions prior to Active Admin 3.2.0, which stems from a csv injection vulnerability in the file csvbuilder.rb...
DRUPAL-CONTRIB-2023-055
This module allows you to turn various data sources Eg CSV or JSON file into interactive visualisation. The DVF module provides a field storage, widget & formatter that can be added to any entity. This module uses two third-party JS libraries having from low to medium vulnerabilities. One of the...
PT-2023-31554 · Unknown · Activeadmin
Name of the Vulnerable Software and Affected Versions: ActiveAdmin versions prior to 2.12.0 Description: A concurrency issue in ActiveAdmin allows a malicious actor to access potentially private data belonging to another user by making CSV export requests at specific times. The issue is caused by...
CVE-2023-48841
Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language Labels Export action...
CVE-2023-48841
Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language Labels Export action...
CVE-2023-48830
Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...