CVE-2018-11525

The plugin "Advanced Order Export For WooCommerce" for WordPress v1.5.4 and before is vulnerable to CSV Injection...

Input validation

The plugin "Advanced Order Export For WooCommerce" for WordPress v1.5.4 and before is vulnerable to CSV Injection...

CVE-2018-11526

CVE-2018-11526 affects the WordPress plugin Comments Import & Export (versions 2.0.4 and earlier). The vulnerability is a CSV injection flaw in the plugin when exporting data, enabling an attacker to inject commands via form fields. Public PoCs and exploit resources describe a remote command exec...

CVE-2018-11525

The plugin "Advanced Order Export For WooCommerce" for WordPress v1.5.4 and before is vulnerable to CSV Injection...

CVE-2018-11526

The plugin "WordPress Comments Import & Export" for WordPress v2.0.4 and before is vulnerable to CSV Injection...

CVE-2018-11525

CVE-2018-11525 affects the WordPress plugin Advanced Order Export For WooCommerce (versions ≤ 1.5.4). The vulnerability is a CSV Injection in exported order data, allowing an attacker to inject commands through form fields. Documentation indicates that when a user with higher privileges exports d...

CVE-2018-11526: Improper Neutralization of Formula Elements in a CSV File

The plugin "WordPress Comments Import & Export" for WordPress v2.0.4 and before is vulnerable to CSV Injection...

CVE-2018-11525: Improper Neutralization of Formula Elements in a CSV File

The plugin "Advanced Order Export For WooCommerce" for WordPress v1.5.4 and before is vulnerable to CSV Injection...

CVE-2018-12530

An issue was discovered in MetInfo 6.0.0. admin/app/batch/csvup.php allows remote attackers to delete arbitrary files via a flienamecsv=../ directory traversal. This can be exploited via CSRF...

Nikto 2.1.6 CSV Injection

Exploit Title: Nikto 2.1.6 - CSV Injection Google Dork: N/A Date: 2018-06-01 Exploit Author: Adam Greenhill Vendor Homepage: https://cirt.net/Nikto2 Software Link: https://github.com/sullo/nikto Affected Version: 2.1.6, 2.1.5 Category: Applications Tested on: Kali Linux 4.14 x64 CVE :...

Nikto 2.1.6 - CSV Injection Vulnerability

Exploit for linux platform in category local exploits Exploit Title: Nikto 2.1.6 - CSV Injection Google Dork: N/A Exploit Author: Adam Greenhill Vendor Homepage: https://cirt.net/Nikto2 Software Link: https://github.com/sullo/nikto Affected Version: 2.1.6, 2.1.5 Category: Applications Tested on:...

Nikto 2.1.6 - CSV Injection

Nikto 2.1.6 - CSV Injection Exploit Title: Nikto 2.1.6 - CSV Injection Google Dork: N/A Date: 2018-06-01 Exploit Author: Adam Greenhill Vendor Homepage: https://cirt.net/Nikto2 Software Link: https://github.com/sullo/nikto Affected Version: 2.1.6, 2.1.5 Category: Applications Tested on: Kali Linu...

Nikto 2.1.6 - CSV Injection

Exploit Title: Nikto 2.1.6 - CSV Injection Google Dork: N/A Date: 2018-06-01 Exploit Author: Adam Greenhill Vendor Homepage: https://cirt.net/Nikto2 Software Link: https://github.com/sullo/nikto Affected Version: 2.1.6, 2.1.5 Category: Applications Tested on: Kali Linux 4.14 x64 CVE :...

Security Bulletin: IBM Content Navigator is affected by a common separated value (CSV) vulnerability

Summary IBM Content Navigator has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1366 DESCRIPTION: IBM Content Navigator is vulnerable to Comma Separated Value CSV Injection. An attacker could exploit this vulnerability to exploit other vulnerabilities in spreadsheet...

Security Bulletin: Remote Code Execution vulnerability in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-1547)

Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to a remote code execution vulnerability Vulnerability Details CVEID: CVE-2018-1547 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere could allow a remote attacker to execute arbitrary code on the...

Security Bulletin: Malicious File Download vulnerability in IBM Business Process Manager (BPM) and WebSphere Lombardi Edition (WLE) - CVE-2016-9693

Summary A comma separated file CSV download feature exists in IBM BPM and WLE and is available for anonymous users. An attacker can craft a URL that can trigger a download of attacker-supplied content under an attacker-supplied file name onto the victim's machine. Vulnerability Details CVEID:...

Command injection

OS Command Injection vulnerability in McAfee ePolicy Orchestrator ePO 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output...

CVE-2017-3936

OS Command Injection vulnerability in McAfee ePolicy Orchestrator ePO 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output...

CVE-2017-3936 McAfee ePolicy Orchestrator (ePO) - OS Command Injection vulnerability

OS Command Injection vulnerability in McAfee ePolicy Orchestrator ePO 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output...

CVE-2017-3936: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in McAfee ePolicy Orchestrator ePO 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output...