6760 matches found
PT-2017-9948
Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.0 MP1 Symantec Endpoint Protection versions prior to 12.1 RU6 MP7 Description The issue concerns the export of quarantine logs in CSV format, which can potentially allow attackers to inject...
WS-2017-3793
In weblate in versions weblate-2.10 to weblate-2.13 is vulnerable to CSV Injection with the CSV export feature...
CVE-2017-6095
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...
CVE-2017-6095
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...
CVE-2017-6095
A SQL injection issue was discovered in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php Unauthenticated with the GET Parameter: listid...
HackerOne: Information leakage via CSV when content is valid JavaScript
Summary: The function "Download as CSV" might leak information to 3rd domains. The exploitation seems unlikely and purely theoretical but it might work in some cases. Description Include Impact: Take downloading payments as CSV, for example, which is recently launched. The response to...
AD ACL Scanner
AD ACL Scanner AD ACL Scanner is a tool completly written in PowerShell with GUI used to create reports of access control lists DACLs and system access control lists SACLs in Active Directory . New Features Faster compare of Access Control Lists using USN from replication metadata. Primary...
FullContact BB #2 - CSV Excel Macro Injection Vulnerability
Document Title: =============== FullContact BB 2 - CSV Excel Macro Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1904 Release Date: ============= 2017-01-19 Vulnerability Laboratory ID VL-ID: ====================================...
FullContact BB #2 - CSV Excel Macro Injection Vulnerability
Document Title: =============== FullContact BB 2 - CSV Excel Macro Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1904 Release Date: ============= 2017-01-19 Vulnerability Laboratory ID VL-ID: ====================================...
CVE-2016-10112
Cross-site scripting XSS vulnerability in the WooCommerce plugin before 2.6.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML by providing crafted tax-rate table values in CSV format...
PT-2017-7740
Name of the Vulnerable Software and Affected Versions WooCommerce plugin versions prior to 2.6.9 Description A cross-site scripting XSS issue exists, allowing remote authenticated administrators to inject arbitrary web script or HTML. This is achieved by providing crafted tax-rate table values in...
CVE-2016-10112: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the WooCommerce plugin before 2.6.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML by providing crafted tax-rate table values in CSV format...
Denial Of Service (DoS)
wger is vulnerable to denial-of-service DoS attacks. The vulnerability exists as there are no limit checks in the csv upload functionality and it is exploitable by importing large size csv...
FTPShell Server 6.36 - .csv Local Denial of Service Exploit
Exploit for windows platform in category dos / poc Exploit FTPShell server 6.36 '.csv' CrashPoC Author: albalawisultan Tested on:win7 st :http://www.ftpshell.com/download.htm 1-open FTPShell Server Administrator 2-manage Ftp accounts 3-import from csv ban=...
FTPShell Server 6.36 - .csv Local Denial of Service
FTPShell Server 6.36 - .csv Local Denial of Service Exploit FTPShell server 6.36 '.csv' CrashPoC Author: albalawisultan Tested on:win7 st :http://www.ftpshell.com/download.htm 1-open FTPShell Server Administrator 2-manage Ftp accounts 3-import from csv ban=...
Man In The Middle (MitM)
geoip-lite-country is vulnerable to man-in-the-middle MitM attacks. This is because the library downloads a CSV resource via HTTP, allowing MitM attacks...
Shopify: XSS on postal codes
Hi, 190951 is not fully fixed. Scripts can be injected via a csv file and make it execute in the application. Screenshots attached...
WordPress ZX CSV Upload 1 Plugin - Authenticated SQL Injection
This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
WordPress ZX CSV Upload 1 Plugin - Authenticated SQL Injection
This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...