2404 matches found
CVE-2018-16651: Improper Neutralization of Formula Elements in a CSV File
The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports...
CVE-2018-15474: Improper Neutralization of Formula Elements in a CSV File
CSV Injection aka Excel Macro Injection or Formula Injection in /lib/plugins/usermanager/admin.php in DokuWiki 2018-04-22a and earlier allows remote attackers to exfiltrate sensitive data and to execute arbitrary code via a value that is mishandled in a CSV export. NOTE: the vendor has stated "th...
CVE-2018-16308
The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection...
Design/Logic Flaw
The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection...
CVE-2018-16308
The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection...
CVE-2018-16308
The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection...
CVE-2018-16308
CVE-2018-16308 — CSV Injection in WordPress Ninja Forms is a vulnerability in the Ninja Forms plugin for WordPress, affecting versions before 3.3.14.1. The issue is a CSV injection flaw in the plugin’s handling of form data exported to CSV. The CVSS metrics indicate a high impact when exploited l...
CVE-2018-16308
The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection...
WordPress Export Users to CSV plugin <= 1.1.1 - CSV Injection vulnerability
CSV Injection vulnerability found by Javier Olmedo in WordPress Export Users to CSV plugin versions = 1.1.1. Solution 2018.09.01 - we were unable to find a patched version of this plugin...
PT-2018-13479
Name of the Vulnerable Software and Affected Versions Ninja Forms plugin versions prior to 3.3.14.1 Description The issue allows for CSV injection. Recommendations For versions prior to 3.3.14.1, update to version 3.3.14.1 or later to resolve the issue...
CVE-2018-16308: Improper Neutralization of Formula Elements in a CSV File
The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection...
Input validation
OPSWAT MetaDefender before v4.11.2 allows CSV injection...
CVE-2018-16275
OPSWAT MetaDefender before v4.11.2 allows CSV injection...
CVE-2018-16275
OPSWAT MetaDefender before v4.11.2 allows CSV injection...
CVE-2018-16275
CVE-2018-16275 affects OPSWAT MetaDefender prior to 4.11.2 and enables CSV injection. The connected sources consistently state the product and version boundary, identifying the vulnerability as CSV injection in that release line. The CVE details do not provide explicit exploit vectors beyond this...
PT-2018-13457
Name of the Vulnerable Software and Affected Versions OPSWAT MetaDefender versions prior to 4.11.2 Description The issue allows for CSV injection. Recommendations For versions prior to 4.11.2, update to version 4.11.2 or later to resolve the issue...
CVE-2018-16275: Improper Neutralization of Formula Elements in a CSV File
OPSWAT MetaDefender before v4.11.2 allows CSV injection...
WordPress Export Users to CSV Plugin CSV Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Export Users to CSV plugin is used in one of the user data and other metadata exported to a CSV file plugin. A CSV...