CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Patchstack•added 2018/04/09 12:0 a.m.•25 views

WordPress Contact Form 7 to Database Extension plugin 2.10.32 - CSV Injection vulnerability

CSV Injection vulnerability found in WordPress Contact Form 7 to Database Extension plugin version 2.10.32. Vulnerable file ExportToCsvUtf8.php allows remote attackers to inject spreadsheet formulas into CSV files via the contact form. Solution This plugin has been closed and is no longer availab...

9.6CVSS3.6AI score0.07708EPSS

SaveExploits5References1Affected Software1

NVD•added 2018/04/04 7:29 p.m.•26 views

CVE-2018-9035

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form...

9.6CVSS9.4AI score0.07708EPSS

SaveExploits5References1

OSV•added 2018/04/04 7:29 p.m.•24 views

CVE-2018-9035

9.6CVSS7.6AI score

SaveExploits0References1

Cvelist•added 2018/04/04 7:0 p.m.•37 views

CVE-2018-9035

9.5AI score0.07708EPSS

SaveExploits5References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by