6745 matches found
CVE-2019-20385
CVE-2019-20385 affects Logaritmo Aware CallManager 2012 devices. The vulnerability arises from the CSV upload feature in /supervisor/procesa_carga.php, which allows uploading of .php files with a text/* content type. The uploaded PHP code can then be executed by accessing /supervisor/csv/. Red Ha...
PT-2020-10412
Name of the Vulnerable Software and Affected Versions Logaritmo Aware CallManager 2012 Description The issue concerns the CSV upload feature in the /supervisor/procesa carga.php file, which allows the upload of .php files with a text/ content type. The uploaded PHP code can then be executed by...
CVE-2019-19392: Incorrect Default Permissions
The forDNN.UsersExportImport module before 1.2.0 for DNN formerly DotNetNuke allows an unprivileged user to import create new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data...
PT-2020-10153
Name of the Vulnerable Software and Affected Versions DNN formerly DotNetNuke forDNN.UsersExportImport module versions prior to 1.2.0 Description The issue allows an unprivileged user to import new users with Administrator privileges by including specific roles in XML or CSV data, such as...
TeleGram-Scraper - Telegram Group Scraper Tool (Fetch All Information About Group Members)
Telegram Group Scraper Tool. Fetch All Information About Group Members ⢠How To Install & Setup API Termux ⢠API Setup Go to http://my.telegram.org and log in. Click on API development tools and fill the required fields. put app name you want & select other in platform Example : copy "apiid" &...
Flamingo < 2.1.1 - CSV Injection
The Flamingo WordPress plugin was affected by a CSV Injection security vulnerability...
January 14, 2020âKB4534288 (Security-only update)
None None...
January 14, 2020âKB4534306 (OS Build 10240.18453)
None None...
WordPress TablePress Plugin < 1.10 CSV Injection Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112685";...
CVE-2019-20184
KeePass 2.4.1 allows CSV injection in the title field of a CSV export...
CVE-2019-20184
KeePass 2.4.1 allows CSV injection in the title field of a CSV export...
CVE-2019-20184
KeePass 2.4.1 allows CSV injection in the title field of a CSV export...
Design/Logic Flaw
KeePass 2.4.1 allows CSV injection in the title field of a CSV export...
CVE-2019-20180
The TablePress plugin 1.9.2 for WordPress allows tablepressdata CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application that opens the CSV file and not TablePress...
CVE-2019-20180
The TablePress plugin 1.9.2 for WordPress allows tablepressdata CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application that opens the CSV file and not TablePress...
Design/Logic Flaw
The TablePress plugin 1.9.2 for WordPress allows tablepressdata CSV injection by Editor users...
CVE-2019-20184
CVE-2019-20184 affects KeePass 2.4.1 and concerns CSV injection in the title field of a CSV export. The connected documents consistently describe this issue for KeePass 2.4.1, but do not provide specifics on the root cause beyond classifying it as a CSV injection vulnerability, nor details on aff...
CVE-2019-20184
KeePass 2.4.1 allows CSV injection in the title field of a CSV export...
CVE-2019-20184
KeePass 2.4.1 allows CSV injection in the title field of a CSV export...
CVE-2019-20180
The TablePress plugin 1.9.2 for WordPress allows tablepressdata CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application that opens the CSV file and not TablePress...