Vulnerabilities > CVE-2018-11525 - Improper Neutralization of Formula Elements in a CSV File vulnerability in Algolplus Advanced Order Export
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Exploit-Db
description | Wordpress Plugin Advanced Order Export For WooCommerce < 1.5.4 - CSV Injection. CVE-2018-11525. Webapps exploit for PHP platform |
file | exploits/php/webapps/44931.txt |
id | EDB-ID:44931 |
last seen | 2018-06-25 |
modified | 2018-06-25 |
platform | php |
port | 80 |
published | 2018-06-25 |
reporter | Exploit-DB |
source | https://www.exploit-db.com/download/44931/ |
title | Wordpress Plugin Advanced Order Export For WooCommerce < 1.5.4 - CSV Injection |
type | webapps |
Packetstorm
data source | https://packetstormsecurity.com/files/download/148297/wpaoew-csvinject.txt |
id | PACKETSTORM:148297 |
last seen | 2018-06-26 |
published | 2018-06-25 |
reporter | Bhushan B. Patil |
source | https://packetstormsecurity.com/files/148297/WordPress-Advanced-Order-Export-For-WooCommerce-CSV-Injection.html |
title | WordPress Advanced Order Export For WooCommerce CSV Injection |