Design/Logic Flaw

The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell...

CVE-2018-20101

CVE-2018-20101 affects the WordPress plugin “Import users from CSV with meta” (versions

CVE-2018-20101: Improper Neutralization of Input During Web Page Generation

The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell...

PT-2018-15259

Name of the Vulnerable Software and Affected Versions WordPress "Import users from CSV with meta" plugin versions prior to 1.12.1 Description The issue allows for XSS via the value of a cell in the "Import users from CSV with meta" plugin. Recommendations For versions prior to 1.12.1, update the...

PT-2017-18984

Name of the Vulnerable Software and Affected Versions atmail versions prior to 7.8.0.2 Description The issue allows an attacker to perform actions such as uploading and importing users via CSV due to CSRF. Recommendations For versions prior to 7.8.0.2, update to version 7.8.0.2 or later to resolv...

CVE-2016-1593

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. dot dot in a filename within a multipart/form-data POST request to a LiveTime.woa URL...

CVE-2016-1593

CVE-2016-1593 affects Micro Focus/Novell Service Desk prior to 7.2. A directory traversal flaw in the import users feature allows a remote authenticated administrator to upload and execute arbitrary JSP files via a .. (dot dot) in a filename in a multipart/form-data POST to LiveTime.woa, enabling...

PT-2016-4877

Name of the Vulnerable Software and Affected Versions Micro Focus Novell Service Desk versions prior to 7.2 Description The issue allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. dot dot in a filename within a multipart/form-data POST request to a...

CVE-2016-1593: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. dot dot in a filename within a multipart/form-data POST request to a LiveTime.woa URL...

Micro Focus Service Desk Path Traversal Vulnerability

Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...

ActiveFax (ActFax) 4.3 Client Importer Buffer Overflow

The vulnerability is a stack based buffer overflow in the "Import Users from File" function, due to the insecure usage of strcpy while parsing the csv formatted file. The module creates a .exp file that must be imported with ActiveFax server...

ActiveFax (ActFax) 4.3 Client Importer Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'ActiveFax ActFax...

ActiveFax (ActFax) 4.3 Client Importer Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

ActiveFax (ActFax) 4.3 Client Importer Buffer Overflow

This module exploits a vulnerability in ActiveFax Server. The vulnerability is a stack based buffer overflow in the "Import Users from File" function, due to the insecure usage of strcpy while parsing the csv formatted file. The module creates a .exp file that must be imported with ActiveFax...