PT-2018-14018

Name of the Vulnerable Software and Affected Versions Zahir Accounting Enterprise Plus versions 6 through 10b Description The issue allows remote attackers to execute arbitrary code via a crafted CSV file that is accessed through the Import CSV File menu. This is due to stack-based buffer...