Sql injection

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user...

CVE-2020-35382

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user...

CVE-2020-35382

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user...

CVE-2020-35382

CVE-2020-35382 affects Classbooking prior to version 2.4.1. It enables SQL Injection through the username field when adding a new user via a CSV, with potential impact to confidentiality and integrity. Remediation: upgrade to 2.4.1 or later; if upgrading isn’t possible, apply mitigations to sanit...

PT-2020-17321

Name of the Vulnerable Software and Affected Versions Classbooking versions prior to 2.4.1 Description The issue allows for SQL injection via the username field of a CSV file when adding a new user. Recommendations For versions prior to 2.4.1, update to version 2.4.1 or later to resolve the issue...

CVE-2020-35382: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user...

PT-2020-17139

Name of the Vulnerable Software and Affected Versions SabaiApps WordPress Directories Pro plugin versions prior to 1.3.46 Description A cross-site scripting XSS issue exists, allowing attackers to inject arbitrary web script or HTML by convincing a site administrator to import a specially crafted...

CVE-2020-29304: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and previous, allows attackers who have convinced a site administrator to import a specially crafted CSV file to inject arbitrary web script or HTML as the victim is proceeding through...

ChurchCRM 4.2.0 CSV Injection

Exploit Title: ChurchCRM 4.2.1- CSV/Formula Injection Date: 2020- 10- 24 Exploit Author: Mufaddal Masalawala Vendor Homepage: https://churchcrm.io/ Software Link: https://github.com/ChurchCRM/CRM Version: 4.2.0 Payload: =10+20+cmd|' /C calc'!A0 Tested on: Kali Linux 2020.3 Proof Of Concept: CSV...

ChurchCRM 4.2.0 - CSV/Formula Injection

Exploit Title: ChurchCRM 4.2.1- CSV/Formula Injection Date: 2020- 10- 24 Exploit Author: Mufaddal Masalawala Vendor Homepage: https://churchcrm.io/ Software Link: https://github.com/ChurchCRM/CRM Version: 4.2.0 Payload: =10+20+cmd|' /C calc'!A0 Tested on: Kali Linux 2020.3 Proof Of Concept: CSV...

OnionSearch - A Script That Scrapes Urls On Different .Onion Search Engines

OnionSearch is a Python3 script that scrapes urls on different ".onion" search engines. Prerequisite Python 3  Currently supported Search engines ahmia darksearchio onionland notevil darksearchenginer phobos onionsearchserver torgle onionsearchengine tordex tor66 tormax haystack multivac evosear...

PT-2020-5247

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Security version 1.3.0.1CP4S Description The issue is related to improper validation of csv file contents, which could allow a remote attacker to execute arbitrary commands on the system. This is due to the lack of measures t...

CVE-2020-4759

IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 188736...

Input validation

IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 188736...

CVE-2020-4759

IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 188736...

CVE-2020-4759: Improper Neutralization of Formula Elements in a CSV File

IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 188736...

CVE-2020-22278: Improper Neutralization of Formula Elements in a CSV File

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

Input validation

IBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-ForceID: 186696...

CVE-2020-4689

IBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-ForceID: 186696...

CVE-2020-16214

In Patient Information Center iX PICiX Versions B.02, C.02, C.03, the software saves user-provided information into a comma-separated value CSV file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadshee...