CVE-2018-16651

HIGH Year: 2018
CVSS v3 Score
7.2
High
CVSS v2 Score
9.0
Critical
Weakness Type
CWE-1236
View all →

Vulnerability Description

The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports.

Related Vulnerabilities

CVE-2022-45078

HIGH
CVSS:7.2(High)

Improper Neutralization of Formula Elements in a CSV File vulnerability in Solwin Infotech User Blocker.This issue affects User Blocker: from n/a through 1.5.5.

CWE-12362022

CVE-2023-23678

HIGH
CVSS:7.2(High)

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPEkaClub WP Cookie Consent ( for GDPR, CCPA & ePrivacy ).This issue affects WP Cookie Consent ( for GDPR, CCPA & ePrivacy ):...

CWE-12362023

CVE-2019-15092

HIGH
CVSS:7.3(High)

The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name, and last_name columns in an exported CS...

CWE-12362019

CVE-2020-13247

HIGH
CVSS:7.3(High)

BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area.

CWE-12362020

CVE-2020-7049

HIGH
CVSS:7.3(High)

Nozomi Networks OS before 19.0.4 allows /#/network?tab=network_node_list.html CSV Injection.

CWE-12362020