2403 matches found
CVE-2018-8092
Mautic before 2.13.0 allows CSV injection...
CVE-2018-8092
Mautic before 2.13.0 allows CSV injection...
CVE-2018-8092
CVE-2018-8092 affects Mautic prior to 2.13.0, enabling a CSV injection in exported contact lists. The issue is documented in multiple sources (e.g., GHSA-29V9-2FPX-J5G9 and OSV/GHSA advisories) with a fix recommended: update to 2.13.0 or later. The connected documents confirm the vulnerability is...
CVE-2018-8092
Mautic before 2.13.0 allows CSV injection...
CVE-2018-8092: Improper Neutralization of Formula Elements in a CSV File
Mautic before 2.13.0 allows CSV injection...
PT-2018-18426
Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 2.13.0 Description: The issue allows for CSV injection with exported contact lists. This can be exploited when a user exports contact lists. Recommendations: For versions prior to 2.13.0, update to 2.13.0 or later...
Joomla Convert Forms version 2.0.3 - Formula Injection (CSV Injection) Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla Extension Convert Forms version 2.0.3 - Formula Injection CSV Injection Google Dork: N/A Exploit Author: Jetty Sairam Software Link:...
Command injection
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...
CVE-2018-10063
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...
CVE-2018-10063
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...
CVE-2018-10063
CVE-2018-10063 affects Joomla! Convert Forms extension prior to 2.0.4. The vulnerability is a CSV injection that enables remote command execution when exporting leads/form data, due to how CSV fields are handled during export. Documented impact includes potential arbitrary command execution with ...
Joomla Convert Forms 2.0.3 CSV Injection
Exploit Title: Joomla Extension Convert Forms version 2.0.3 - Formula Injection CSV Injection Google Dork: N/A Date: 12-04-2018 Exploit Author: Jetty Sairam Software Link: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/ Affected Version: 2.03 and befo...
Joomla Convert Forms version 2.0.3 - Formula Injection (CSV Injection)
Joomla Convert Forms version 2.0.3 - Formula Injection CSV Injection Exploit Title: Joomla Extension Convert Forms version 2.0.3 is vulnerable to Formula Injection CSV Injection Google Dork: N/A Date: 12-04-2018 Exploit Author: Jetty Sairam Software Link:...
CVE-2018-10063: Undefined Security Weakness
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...
PT-2018-9651
Name of the Vulnerable Software and Affected Versions: Convert Forms extension versions prior to 2.0.4 Description: The issue concerns a Remote Command Execution vulnerability using CSV Injection. This occurs when the software mishandles the export of a Leads file, allowing for potential...
Convert Forms, 2.0.3, CSV Injection
Convert Forms by Tassos.gr, versions 2.0.3 and previous, CSV Injection resolution: update to 2.0.4 update notice: https://www.tassos.gr/blog/convert-forms-2-0-4-security-release...
Joomla! Convert Forms version 2.0.3 - Formula Injection (CSV Injection)
Exploit Title: Joomla Extension Convert Forms version 2.0.3 is vulnerable to Formula Injection CSV Injection Google Dork: N/A Date: 12-04-2018 Exploit Author: Jetty Sairam Software Link: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/ Affected Version...
Passit: CSV-injection in export functionality
Summary: CSV-injection in export functionality Description: Hello team! I have found that you have a CSV-injection vulnerability in export functionality. First I thought that this is just fine but because you can group up this can be used against another users which makes this pretty critical...
Contact Form 7 to Database Extension 2.10.32 - CSV Injection
Note: The plugin has been closed on WP and moved to Github https://github.com/mdsimpson/contact-form-7-to-database-extension/releases...
WordPress Contact Form 7 to Database Extension plugin 2.10.32 - CSV Injection vulnerability
CSV Injection vulnerability found in WordPress Contact Form 7 to Database Extension plugin version 2.10.32. Vulnerable file ExportToCsvUtf8.php allows remote attackers to inject spreadsheet formulas into CSV files via the contact form. Solution This plugin has been closed and is no longer availab...