Vulnerabilities > CVE-2018-11526 - Improper Neutralization of Formula Elements in a CSV File vulnerability in Webtoffee Wordpress Comments Import and Export
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Exploit-Db
description | Wordpress Plugin Comments Import & Export < 2.0.4 - CSV Injection. CVE-2018-11526. Webapps exploit for PHP platform |
file | exploits/php/webapps/44940.txt |
id | EDB-ID:44940 |
last seen | 2018-06-25 |
modified | 2018-06-25 |
platform | php |
port | 80 |
published | 2018-06-25 |
reporter | Exploit-DB |
source | https://www.exploit-db.com/download/44940/ |
title | Wordpress Plugin Comments Import & Export < 2.0.4 - CSV Injection |
type | webapps |
Packetstorm
data source | https://packetstormsecurity.com/files/download/148293/wpcie-csvinject.txt |
id | PACKETSTORM:148293 |
last seen | 2018-06-26 |
published | 2018-06-25 |
reporter | Bhushan B. Patil |
source | https://packetstormsecurity.com/files/148293/WordPress-Comments-Import-And-Export-CSV-Injection.html |
title | WordPress Comments Import And Export CSV Injection |