Lucene search
+L

3 matches found

NVD
NVD
•added 2018/05/01 7:29 p.m.•39 views

CVE-2018-10255

A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution...

8.8CVSS9AI score0.06913EPSS
SaveExploits4References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/01 12:00 a.m.•7 views

CVE-2018-10255: Improper Neutralization of Formula Elements in a CSV File

A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution...

8.8CVSS8AI score0.06913EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2018/05/01 12:00 a.m.•4 views

PT-2018-9789

Name of the Vulnerable Software and Affected Versions: clustercoding Blog Master Pro version 1.0 Description: A CSV Injection issue was discovered that allows a user with low-level privileges to inject a command into the exported CSV file, potentially leading to code execution. Recommendations: F...

8.8CVSS5.9AI score0.06913EPSS
SaveExploits4References4
Rows per page
Query Builder