Lucene search
Veracode Vulnerability DatabaseVERACODE:40635HistoryMay 23, 2023 - 2:29 a.m.
CSV Injection
2023-05-2302:29:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
csv injection
francoisjacquet/rosariosis
listoutput.fnc.php
vulnerability
software
0.002 Low
EPSS
Percentile
53.7%
francoisjacquet/rosariosis is vulnerable to CSV Injection. The vulnerability exists because the _listSearch function of ListOutput.fnc.php does not properly escape CSV records, which allows an attacker to inject and execute malicious code via a crafted excel file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| francoisjacquet/rosariosis | le | v10.9.4 | |
| francoisjacquet/rosariosis | le | v10.9.4 |
References
Related
cve
cve
CVE-2023-29918
2023-05-02 16:15:09
prion
prion
Input validation
2023-05-02 16:15:00
cvelist
cvelist
CVE-2023-29918
2023-05-02 00:00:00
zdt
zdt
RosarioSIS 10.8.4 - CSV Injection Vulnerability
2023-07-28 00:00:00
github
github
RosarioSIS vulnerable to CSV Injection
2023-05-02 18:30:20
osv
osv
RosarioSIS vulnerable to CSV Injection
2023-05-02 18:30:20
CVE-2023-29918
2023-05-02 16:15:09