PT-2018-17128

Name of the Vulnerable Software and Affected Versions: Open-Xchange OX App Suite versions prior to 7.6.3-rev3 Open-Xchange OX App Suite versions 7.8.x prior to 7.8.2-rev4 Open-Xchange OX App Suite versions 7.8.3 prior to 7.8.3-rev5 Open-Xchange OX App Suite versions 7.8.4 prior to 7.8.4-rev4...

CVE-2018-5755: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the readerengine component in Open-Xchange OX App Suite before 7.6.3-rev3, 7.8.x before 7.8.2-rev4, 7.8.3 before 7.8.3-rev5, and 7.8.4 before 7.8.4-rev4 allows remote attackers to read arbitrary files via a full pathname in a formula in a spreadsheet...

WordPress WordCamp Talks plugin <= 1.0.0-beta2 - Formula injection via CSV exports

The WordCamp Talks plugin does not sanitize CSV exports properly, which can lead to spreadsheet formula injection via malicious user input. Solution Update the plugin...

Ian Dunn: Formula injection via CSV exports in WordCamp Talks plugin

The WordCamp Talks plugin does not attempt to sanitize CSV exports, which can lead to spreadsheet formula injection via malicious inputs. POC ======== Submit a new talk with the title of =1+1. Visit the All Talks page /wp-admin/edit.php?posttype=talks Click the CSV Export link Open the downloaded...

CVE-2015-5349: Improper Neutralization of Special Elements used in a Command

The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet...