CVE-2025-22978

eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...

CVE-2025-22978

eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...

CVE-2025-22978

eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...

CVE-2025-22978

eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...

CVE-2025-22978

eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...

PT-2025-4755 · Eladmin · Eladmin

Name of the Vulnerable Software and Affected Versions: eladmin versions =2.7 Description: The issue concerns CSV injection in the exception log download module. This allows for potential data manipulation or extraction. No information is provided about the estimated number of affected devices or...

CVE-2025-22978: Improper Neutralization of Special Elements in Output Used by a Downstream Component

eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...

CVE-2025-22978

eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...

CVE-2025-22978

The eladmin backend management system (versions

ELADMIN 安全漏洞

ELADMIN is a backend management system for elunez individual developers. A security vulnerability exists in ELADMIN 2.7 and earlier versions, which stems from a CSV injection issue in the Exception Log Download module...

CVE-2025-22978

eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...

CVE-2023-46400

KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function...

CVE-2024-22063 ZTE ZENIC ONE R58 product has a CSV injection vulnerability

The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices...

CVE-2024-22063

The CVE-2024-22063 entry concerns ZTE ZENIC ONE R58 devices, describing a command-injection vulnerability. According to the connected sources, an authenticated attacker could tamper with messages and inject malicious code, potentially enabling further attacks on related devices. The available doc...

CVE-2024-53260 Course Roster vulnerable to CSV Injection in Autolab

Autolab is a course management service that enables auto-graded programming assignments. A user can modify their first and or last name to include a valid excel / spreadsheet formula. When an instructor downloads their course's roster and opens, this name will then be evaluated as a formula. This...

CVE-2024-53260 Course Roster vulnerable to CSV Injection in Autolab

Autolab is a course management service that enables auto-graded programming assignments. A user can modify their first and or last name to include a valid excel / spreadsheet formula. When an instructor downloads their course's roster and opens, this name will then be evaluated as a formula. This...

CVE-2024-53555

A CSV injection vulnerability in Taiga v6.8.1 allows attackers to execute arbitrary code via uploading a crafted CSV file...

CVE-2024-53555

The open-source project management tool Taiga version 6.8.1 is susceptible to a CSV injection vulnerability. An attacker can achieve arbitrary code execution by uploading a specifically manipulated and crafted CSV file. This issue is caused by the improper neutralization of formula elements withi...

CVE-2024-53555

A CSV injection vulnerability in Taiga v6.8.1 allows attackers to execute arbitrary code via uploading a crafted CSV file...

CVE-2024-53555: Improper Neutralization of Formula Elements in a CSV File

A CSV injection vulnerability in Taiga v6.8.1 allows attackers to execute arbitrary code via uploading a crafted CSV file...