PT-2018-18881

Name of the Vulnerable Software and Affected Versions Open-AudIT versions prior to 2.2 Description The issue affects Open-AudIT, where a CSV injection is possible. Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue...

CVE-2018-8092

Mautic before 2.13.0 allows CSV injection...

Input validation

Mautic before 2.13.0 allows CSV injection...

CVE-2018-8092

Mautic before 2.13.0 allows CSV injection...

CVE-2018-8092

Mautic before 2.13.0 allows CSV injection...

CVE-2018-8092

CVE-2018-8092 affects Mautic prior to 2.13.0, enabling a CSV injection in exported contact lists. The issue is documented in multiple sources (e.g., GHSA-29V9-2FPX-J5G9 and OSV/GHSA advisories) with a fix recommended: update to 2.13.0 or later. The connected documents confirm the vulnerability is...

CVE-2018-8092

Mautic before 2.13.0 allows CSV injection...

PT-2018-18426

Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 2.13.0 Description: The issue allows for CSV injection with exported contact lists. This can be exploited when a user exports contact lists. Recommendations: For versions prior to 2.13.0, update to 2.13.0 or later...

CVE-2018-8092: Improper Neutralization of Formula Elements in a CSV File

Mautic before 2.13.0 allows CSV injection...

Dump Active Directory Domain Information: goddi

goddi go dump domain info dumps domain users, groups, domain controllers, and more in CSV output and it runs on Windows and Linux. Functionality StartTLS and TLS tls.Client func connections supported. Connections over TLS are default. All output goes to CSVs and are created in /csv/ in the curren...

CVE-2016-9094: Improper Input Validation

Symantec Endpoint Protection clients place detected malware in quarantine as part of the intended product functionality. The quarantine logs can be exported for review by the user in a variety of formats including .CSV files. Prior to 14.0 MP1 and 12.1 RU6 MP7, the potential exists for file...

Joomla Convert Forms version 2.0.3 - Formula Injection (CSV Injection) Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Extension Convert Forms version 2.0.3 - Formula Injection CSV Injection Google Dork: N/A Exploit Author: Jetty Sairam Software Link:...

CVE-2018-10063

The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...

Command injection

The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...

CVE-2018-10063

CVE-2018-10063 affects Joomla! Convert Forms extension prior to 2.0.4. The vulnerability is a CSV injection that enables remote command execution when exporting leads/form data, due to how CSV fields are handled during export. Documented impact includes potential arbitrary command execution with ...

CVE-2018-10063

The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...

CVE-2018-10063: Undefined Security Weakness

The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file...

Convert Forms, 2.0.3, CSV Injection

Convert Forms by Tassos.gr, versions 2.0.3 and previous, CSV Injection resolution: update to 2.0.4 update notice: https://www.tassos.gr/blog/convert-forms-2-0-4-security-release...

Joomla! Convert Forms version 2.0.3 - Formula Injection (CSV Injection)

Exploit Title: Joomla Extension Convert Forms version 2.0.3 is vulnerable to Formula Injection CSV Injection Google Dork: N/A Date: 12-04-2018 Exploit Author: Jetty Sairam Software Link: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/ Affected Version...

PT-2018-9651

Name of the Vulnerable Software and Affected Versions: Convert Forms extension versions prior to 2.0.4 Description: The issue concerns a Remote Command Execution vulnerability using CSV Injection. This occurs when the software mishandles the export of a Leads file, allowing for potential...