CVE-2018-10063

The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...

CVE-2018-10063

The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...

CVE-2018-10063

CVE-2018-10063 affects Joomla! Convert Forms extension prior to 2.0.4. The vulnerability is a CSV injection that enables remote command execution when exporting leads/form data, due to how CSV fields are handled during export. Documented impact includes potential arbitrary command execution with ...

Joomla Convert Forms 2.0.3 CSV Injection

Exploit Title: Joomla Extension Convert Forms version 2.0.3 - Formula Injection CSV Injection Google Dork: N/A Date: 12-04-2018 Exploit Author: Jetty Sairam Software Link: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/ Affected Version: 2.03 and befo...

Joomla Convert Forms version 2.0.3 - Formula Injection (CSV Injection)

Joomla Convert Forms version 2.0.3 - Formula Injection CSV Injection Exploit Title: Joomla Extension Convert Forms version 2.0.3 is vulnerable to Formula Injection CSV Injection Google Dork: N/A Date: 12-04-2018 Exploit Author: Jetty Sairam Software Link:...

PT-2018-9651

Name of the Vulnerable Software and Affected Versions: Convert Forms extension versions prior to 2.0.4 Description: The issue concerns a Remote Command Execution vulnerability using CSV Injection. This occurs when the software mishandles the export of a Leads file, allowing for potential...

CVE-2018-10063: Undefined Security Weakness

The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...

Convert Forms, 2.0.3, CSV Injection

Convert Forms by Tassos.gr, versions 2.0.3 and previous, CSV Injection resolution: update to 2.0.4 update notice: https://www.tassos.gr/blog/convert-forms-2-0-4-security-release...

Joomla! Convert Forms version 2.0.3 - Formula Injection (CSV Injection)

Exploit Title: Joomla Extension Convert Forms version 2.0.3 is vulnerable to Formula Injection CSV Injection Google Dork: N/A Date: 12-04-2018 Exploit Author: Jetty Sairam Software Link: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/ Affected Version...

Xxe

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...

CVE-2017-18197

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...

CVE-2017-18197

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...

CVE-2017-18197

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...

PT-2018-6728

Name of the Vulnerable Software and Affected Versions: mxGraph versions prior to 3.7.6 Description: The issue concerns a missing configuration in the SAXParserFactory instance within the convert function of mxGraphViewImageReader.java, which makes it susceptible to XML External Entity XXE attacks...

CVE-2017-18197: Improper Restriction of XML External Entity Reference

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...

OpenJPEG Buffer Overflow Vulnerability (CNVD-2017-38122)

OpenJPEG is a C-based open source JPEG 2000 codec . A buffer overflow vulnerability exists in the 'pgxtoimage' function of the jpwl/convert.c file in OpenJPEG version 2.3.0. A remote attacker could exploit this vulnerability to cause a denial of service or possibly execute code...

OpenJPEG Buffer Overflow Vulnerability (CNVD-2017-38123)

OpenJPEG is a C-based open source JPEG 2000 codec . A stack buffer overflow vulnerability exists in the 'pgxtovolume' function in the jp3d/convert.c file in OpenJPEG version 2.3.0. A remote attacker could exploit this vulnerability to cause a denial of service or possibly execute code write acros...

PT-2017-14853

Name of the Vulnerable Software and Affected Versions FFmpeg libswresample versions prior to 3.0.102 FFmpeg versions prior to 3.4.2 aubio versions prior to 0.4.7 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application...

CVE-2017-17480

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution...

DEBIAN-CVE-2017-17479

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution...