CVE-2018-9035

CVE-2018-9035 affects the WordPress plugin Contact Form 7 to Database Extension (v2.10.32). The vulnerability is a CSV Injection in ExportToCsvUtf8.php where a column value is printed without validating whether it contains a spreadsheet formula, allowing remote attackers to inject formulas into g...

CVE-2018-9035

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form...

Wordpress Contact Form 7 to Database Extension Plugin CSV Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A CSV injection vulnerability exists in the Wordpress Contact Form 7 to Database Extension plugin, which can be exploited by ...

WordPress Contact Form 7 To Database Extension 2.10.32 CSV Injection

Exploit Title : Contact Form 7 to Database Extension Wordpress Plugin CSV Injection Date: 23-03-2018 Exploit Author : Stefan Broeder Contact : https://twitter.com/stefanbroeder Vendor Homepage: None Software Link: https://wordpress.org/plugins/contact-form-7-to-database-extension Version: 2.10.32...

udrive.ae XSS vulnerability

Open Bug Bounty ID: OBB-593837 Description| Value ---|--- Affected Website:| udrive.ae Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Plugin Contact Form 7 to Database Extension 2.10.32 - CSV Injection

WordPress Plugin Contact Form 7 to Database Extension 2.10.32 - CSV Injection Exploit Title : Contact Form 7 to Database Extension Wordpress Plugin CSV Injection Date: 23-03-2018 Exploit Author : Stefan Broeder Contact : https://twitter.com/stefanbroeder Vendor Homepage: None Software Link:...

Wordpress Contact Form 7 to Database Extension 2.10.32 Plugin - CSV Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Contact Form 7 to Database Extension Wordpress Plugin CSV Injection Exploit Author : Stefan Broeder Contact : https://twitter.com/stefanbroeder Vendor Homepage: None Software Link:...

WordPress Plugin Contact Form 7 to Database Extension 2.10.32 - CSV Injection

Exploit Title : Contact Form 7 to Database Extension Wordpress Plugin CSV Injection Date: 23-03-2018 Exploit Author : Stefan Broeder Contact : https://twitter.com/stefanbroeder Vendor Homepage: None Software Link: https://wordpress.org/plugins/contact-form-7-to-database-extension Version: 2.10.32...

stadtwerke-osnabrueck.de XSS vulnerability

Open Bug Bounty ID: OBB-592621 Description| Value ---|--- Affected Website:| stadtwerke-osnabrueck.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mattressmark.com XSS vulnerability

Open Bug Bounty ID: OBB-586274 Description| Value ---|--- Affected Website:| mattressmark.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

eckernfoerder-kaffeeroesterei.de XSS vulnerability

Open Bug Bounty ID: OBB-584375 Description| Value ---|--- Affected Website:| eckernfoerder-kaffeeroesterei.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....

monheims-naturwunder.de XSS vulnerability

Open Bug Bounty ID: OBB-582412 Description| Value ---|--- Affected Website:| monheims-naturwunder.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

frauenchor-griethausen.de XSS vulnerability

Open Bug Bounty ID: OBB-582403 Description| Value ---|--- Affected Website:| frauenchor-griethausen.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

brigitte-herrmann.de XSS vulnerability

Open Bug Bounty ID: OBB-582380 Description| Value ---|--- Affected Website:| brigitte-herrmann.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ayurveda-asien.de XSS vulnerability

Open Bug Bounty ID: OBB-577486 Description| Value ---|--- Affected Website:| ayurveda-asien.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

karriere.de.ebmpapst.com XSS vulnerability

Open Bug Bounty ID: OBB-573020 Description| Value ---|--- Affected Website:| karriere.de.ebmpapst.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

rhinolinings.com XSS vulnerability

Open Bug Bounty ID: OBB-572494 Description| Value ---|--- Affected Website:| rhinolinings.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mecd.gob.es XSS vulnerability

Open Bug Bounty ID: OBB-572057 Description| Value ---|--- Affected Website:| mecd.gob.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ninja Forms < 3.2.15 - Parameter Tampering

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Parameter Tampering security vulnerability...

Ninja Forms <= 3.2.13 - Cross-Site Scripting (XSS)

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...