CVE-2016-10943

The zx-csv-upload plugin 1 for WordPress has SQL injection via the id parameter...

CVE-2016-10943

CVE-2016-10943 affects the WordPress plugin zx-csv-upload (version 1). The vulnerability is an SQL injection through the id parameter in the plugin’s SQL queries, as documented across multiple sources (NVD entry, Red Hat advisory, CNVD/CVE listings, and WP vulnerability records). Exploitation is ...

September 10, 2019—KB4516062 (Security-only update)

None None...

CVE-2019-16184

A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey responses that will be included in the export CSV file...

CVE-2019-16184

A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey responses that will be included in the export CSV file...

Input validation

A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey responses that will be included in the export CSV file...

CVE-2019-16184

LimeSurvey prior to 3.17.14 is affected by a CSV injection vulnerability where survey responses can inject commands that appear in exported CSV files. The CVE-2019-16184 vulnerability affects LimeSurvey and is described with a risk profile including high impact on confidentiality, integrity, and ...

CVE-2019-16184

A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey responses that will be included in the export CSV file...

CVE-2019-16120

CSV injection in the event-tickets Event Tickets plugin before 4.10.7.2 for WordPress exists via the "All Post Ticketed Attendees" Export Attendees feature...

Input validation

CSV injection in the event-tickets Event Tickets plugin before 4.10.7.2 for WordPress exists via the "All Post Ticketed Attendees" Export Attendees feature...

CVE-2019-16120

CSV injection in the event-tickets Event Tickets plugin before 4.10.7.2 for WordPress exists via the "All Post Ticketed Attendees" Export Attendees feature...

CVE-2019-16120

The CVE-2019-16120 issue affects the WordPress Event Tickets plugin (Event Tickets) prior to version 4.10.7.2. The vulnerability arises in the Export Attendees feature under All Post > Ticketed > Attendees, allowing CSV injection. Impact is potential data manipulation/CSV injection in expor...

PT-2019-14524 · WordPress · Event Tickets

Name of the Vulnerable Software and Affected Versions: Event Tickets plugin for WordPress versions prior to 4.10.7.2 Description: The issue exists in the Event Tickets plugin for WordPress, specifically via the "All Post Ticketed Attendees" Export Attendees feature. This allows for CSV injection...

WordPress Simple 301 Redirects Plugin < 1.25 Multiple Vulnerabilities

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

CVE-2019-6182

A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator LXCA versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formul...

CVE-2019-6182

A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator LXCA versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formul...

Design/Logic Flaw

A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator LXCA versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formul...

CVE-2019-6182

CVE-2019-6182 - Lenovo XClarity Administrator (LXCA) A stored CSV Injection vulnerability exists in LXCA versions prior to 2.5.0. An administrative user could store malformed data in LXCA Jobs and Event Log data, resulting in crafted formulas being stored in an exported CSV file. The crafted form...

CVE-2019-6182

A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator LXCA versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formul...

WordPress Event Tickets plugin <= 4.10.7.1 - CSV Injection vulnerability

CSV Injection vulnerability found by MTK in WordPress Event Tickets plugin versions = 4.10.7.1. Solution 3 September 2019 - we were unable to find a patched version of this plugin. Deactivate and uninstall until the patched version release...