CVE-2020-36756 10WebAnalytics <= 1.2.8 - Cross-Site Request Forgery Bypass

The 10WebAnalytics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.8. This is due to missing or incorrect nonce validation on the createcsvfile function. This makes it possible for unauthenticated attackers to create a CSV file via a forged...

WordPress Plugin 10WebAnalytics 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2023-11896

Name of the Vulnerable Software and Affected Versions 10WebAnalytics plugin for WordPress versions up to, and including, 1.2.8 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the create csv file function. This allows unauthenticated...

CSRF vulnerability and missing permission checks in benchmark-evaluator

benchmark-evaluator 1.0.1 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified URL and to check for the existence of directories, .csv, and .ycsb files on the Jenkins...

PT-2023-5400

Name of the Vulnerable Software and Affected Versions IBM Watson Knowledge Catalog on Cloud Pak for Data version 4.0 Description The issue is related to a lack of proper validation of CSV file contents, which could allow a remote attacker to execute arbitrary commands on the system by sending a...

CVE-2023-3493

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...

Input validation

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2023-3493 Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2023-3493 Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2023-3493 Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2023-3493

Summary: CVE-2023-3493 affects Fossbilling’s fossbilling/fossbilling prior to 0.5.3, caused by improper neutralization of formula elements in CSV exports (CSV injection). Affected software: fossbilling/fossbilling (GitHub) before version 0.5.3; affected artifact is the CSV export/handling functio...

CVE-2023-3493

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2023-3493: Improper Neutralization of Formula Elements in a CSV File

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3...

CVE-2022-46408

Ericsson Network Manager ENM, versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager NCM where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker...

CVE-2022-46408

Ericsson Network Manager ENM, versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager NCM where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker...

CVE-2022-46408

Ericsson Network Manager ENM, versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager NCM where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker...

CVE-2022-46408: Improper Neutralization of Formula Elements in a CSV File

Ericsson Network Manager ENM, versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager NCM where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker...

CVE-2023-3302

Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9...

PT-2023-24143

Name of the Vulnerable Software and Affected Versions admidio/admidio versions prior to 4.2.9 Description The issue concerns improper neutralization of formula elements in a CSV file. This problem affects the GitHub repository admidio/admidio. Recommendations For versions prior to 4.2.9, update t...

CVE-2023-3302

CVE-2023-3302 affects the open‑source Admidio member management system. The vulnerability is in the CSV handling of admidio/admidio prior to 4.2.9, caused by improper neutralization of formula elements in CSV files, which can lead to formula injection when CSV data is processed. Impact is describ...