exploitDog

CVE-2018-9035

Опубликовано: 04 апр. 2018

Источник: nvd

CVSS3: 9.6

CVSS2: 6.8

EPSS Низкий

Описание

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form.

Ссылки

https://www.exploit-db.com/exploits/44367/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/44367/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:contact-form-7-to-database-extension_project:contact-form-7-to-database-extension:*:*:*:*:*:*:*:*

Версия до 2.10.32 (включая)

EPSS

Процентиль: 92%

0.08414

Низкий

9.6 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-1236

Связанные уязвимости

GHSA-jvg2-rvxj-jmp7

CVSS3: 9.6

github

больше 3 лет назад

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form.

EPSS

Процентиль: 92%

0.08414

Низкий

9.6 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-1236