phpMyAdmin CSV Injection Vulnerability

phpMyAdmin is a free, web-based MySQL database management tool from the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A CSV injection vulnerability exists in phpMyAdmin 5.0.2 and...

CVE-2020-22274

JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...

CVE-2020-22274

JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...

Design/Logic Flaw

JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...

CVE-2020-22278

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

CVE-2020-22277

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile...

CVE-2020-22277

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile...

CVE-2020-22278

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

CVE-2020-22276

WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...

CVE-2020-22276

WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...

Input validation

WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...

Design/Logic Flaw

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile...

Design/Logic Flaw

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

CVE-2020-22278

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

CVE-2020-22274

JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...

CVE-2020-22274

CVE-2020-22274 affects JomSocial (Joomla Social Network Extention) 4.7.6, with a CSV injection flaw exploitable via a customer profile. The vulnerability’s root cause is CSV injection in the profile handling, and CVSS metrics indicate a HIGH/CRITICAL risk (CVSS v3.1: 9.8; network attack, no auth,...

CVE-2020-22277

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile...

CVE-2020-22276

The CVE-2020-22276 affects the WeForms WordPress plugin, version 1.4.7, which is vulnerable to CSV injection via a form entry. The CVSS data in the record shows a high severity (CVSS v3.1 base score 9.8, CRITICAL) with network attack vector, no authentication, and no user interaction required, im...

CVE-2020-22276

WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...

CVE-2020-22278

Summary (CVE-2020-22278): phpMyAdmin up to 5.0.2 is listed as vulnerable to a CSV injection via the Export feature. The description notes the vendor disputes this claim by stating that the CSV is generated from database contents (i.e., the data itself, not the export process, is called out). The ...