1943 matches found
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
ELADMIN 安全漏洞
ELADMIN is a backend management system for elunez individual developers. A security vulnerability exists in ELADMIN 2.7 and earlier versions, which stems from a CSV injection issue in the Exception Log Download module...
PT-2025-4755 · Eladmin · Eladmin
Name of the Vulnerable Software and Affected Versions: eladmin versions =2.7 Description: The issue concerns CSV injection in the exception log download module. This allows for potential data manipulation or extraction. No information is provided about the estimated number of affected devices or...
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
CVE-2025-22978
CVE-2025-22978 affects eladmin
CVE-2025-22978
eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...
CVE-2023-46400
KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function...
CVE-2024-22063 ZTE ZENIC ONE R58 product has a CSV injection vulnerability
The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices...
CVE-2024-22063
The CVE-2024-22063 entry concerns ZTE ZENIC ONE R58 devices, describing a command-injection vulnerability. According to the connected sources, an authenticated attacker could tamper with messages and inject malicious code, potentially enabling further attacks on related devices. The available doc...
CVE-2024-53260 Course Roster vulnerable to CSV Injection in Autolab
Autolab is a course management service that enables auto-graded programming assignments. A user can modify their first and or last name to include a valid excel / spreadsheet formula. When an instructor downloads their course's roster and opens, this name will then be evaluated as a formula. This...
CVE-2024-53260 Course Roster vulnerable to CSV Injection in Autolab
Autolab is a course management service that enables auto-graded programming assignments. A user can modify their first and or last name to include a valid excel / spreadsheet formula. When an instructor downloads their course's roster and opens, this name will then be evaluated as a formula. This...
CVE-2024-53555
A CSV injection vulnerability in Taiga v6.8.1 allows attackers to execute arbitrary code via uploading a crafted CSV file...
Taiga 安全漏洞
Taiga is a free open source project management tool from Taiga Open Source. A security vulnerability exists in Taiga version v6.8.1, which stems from the inclusion of a CSV injection issue that could lead to arbitrary code execution...
CVE-2024-53555
A CSV injection vulnerability in Taiga v6.8.1 allows attackers to execute arbitrary code via uploading a crafted CSV file...
CVE-2024-53555
A CSV injection vulnerability in Taiga v6.8.1 allows attackers to execute arbitrary code via uploading a crafted CSV file...
CVE-2024-53555
CVE-2024-53555 affects Taiga (v6.8.1). A crafted CSV upload can trigger arbitrary code execution due to a CSV injection issue in the import/upload pathway. The vulnerability is tied to the CSV handling logic (CSV injection) and could impact systems that process uploaded CSV files through Taiga. M...
CSV Injection
Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to CSV Injection via the file /account/profile of the Name field under the "Edit Your Profile" section. An attacker can gain elevated privileges and exfiltrate internal system...