CWE-1236
319 CVEs • Abstraction: Base
Improper Neutralization of Formula Elements in a CSV File
The product saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by a spreadsheet product.
CVEs (319)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
IBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via the developer portal and analytics that could contain malicious commands that would be executed once opened by an administrator. IB...Show more |
CSV Injection (aka Excel Macro Injection or Formula Injection) in /lib/plugins/usermanager/admin.php in DokuWiki 2018-04-22a and earlier allows remote attackers to exfiltrate sensitive data and to execute arbitrary code...Show more |
The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports. |
The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection. |
OPSWAT MetaDefender before v4.11.2 allows CSV injection. |
1Export Users To Csv Project 1Export Users To Csv Nov 21, 2024 Aug 28, 2018 N/A· v4 8.6 HIGH· v3 6.8 MEDIUM· v2 The Export Users to CSV plugin through 1.1.1 for WordPress allows CSV injection. |
1Webtoffee 1Wordpress Comments Import And Export Nov 21, 2024 Jun 19, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection. |
1Algolplus 1Advanced Order Export For Woocommerce Nov 21, 2024 Jun 19, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection. |
CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report. |
A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution...Show more |
A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code exe...Show more |
1Clustercoding 1Blog Master Pro Nov 21, 2024 May 1, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code...Show more |
The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection. |
Open-AudIT before 2.2 has CSV Injection. |
Mautic before 2.13.0 allows CSV injection. |
1Contact Form 7 To Database Extension Project 1Contact Form 7 To Database Extension Jun 17, 2026 Apr 4, 2018 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form. |
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export. |
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extension before 3.5.1 for Joomla! via a value that is mishandled in a CSV export. |
Tiki 17.1 does not validate user input for special characters; consequently, a CSV Injection attack can open a CMD.EXE or Calculator window on the victim machine to perform malicious activity, as demonstrated by an "=cmd...Show more |