Vulnerabilities > CVE-2018-10504 - Improper Neutralization of Formula Elements in a CSV File vulnerability in Web-Dorado Form Maker

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
web-dorado
CWE-1236
exploit available
NVD
Published: 2018-04-27
Updated: 2020-08-24

Summary

The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.

Vulnerable Configurations

Part Description Count
Application
Web-Dorado
202

Common Weakness Enumeration (CWE)

Exploit-Db

descriptionWordPress Plugin Form Maker 1.12.20 - CSV Injection. CVE-2018-10504. Webapps exploit for PHP platform
fileexploits/php/webapps/44559.txt
idEDB-ID:44559
last seen2018-05-24
modified2018-04-30
platformphp
port
published2018-04-30
reporterExploit-DB
sourcehttps://www.exploit-db.com/download/44559/
titleWordPress Plugin Form Maker 1.12.20 - CSV Injection
typewebapps

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/147408/wpformmaker11220-inject.txt
idPACKETSTORM:147408
last seen2018-05-07
published2018-04-30
reporterJetty Sairam
sourcehttps://packetstormsecurity.com/files/147408/WordPress-Form-Maker-1.12.20-CSV-Injection.html
titleWordPress Form Maker 1.12.20 CSV Injection

References