TYPE DE FAIBLESSE
Injection CSV CWE-1236
14 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-1236 (en anglais) →
CVE-2026-109396Les plateformes de commerce électronique Thelia sont affectées par une faille d'injection CSV dans les formulaires d'inscription, de commande et d'inscription à la newsletter. Un v…
2.3 FAIBLE
CVE-2026-108579Les versions d'OpenPanel jusqu'à la version 2.3.0 sont affectées par une faille d'injection CSV via le point de terminaison `/track`. Un attaquant non authentifié peut envoyer un i…
2.3 FAIBLE
CVE-2026-10248Le système de gestion des ventes et des stocks de pharmacie de SourceCodester (jusqu'à la v1.0) est vulnérable à l'injection CSV via l'interface de création de fournisseurs. Un att…
2.0 FAIBLE
CVE-2025-61873Les installations de Request Tracker (RT) antérieures aux versions 4.4.9, 5.0.9 et 6.0.2 sont vulnérables à l'injection CSV via les valeurs des tickets. Un attaquant disposant de p…
2.6 FAIBLE
CVE-2025-14229A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the component SVC Report Export. Such m…
2.0 FAIBLE
CVE-2025-12249A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. The impacted element is an unknown function of the component Edit Ticket Page. Performing manipulation …
2.1 FAIBLE
CVE-2025-11279A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. This issue affects some unknown processing of the component Add Work Item Page. The manipulation of the…
2.0 FAIBLE
CVE-2025-55745UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Versions 0.3.0 and prior are vulnerable to CSV injection, also known as formula…
2.5 FAIBLE
CVE-2025-9241A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be initiated remotely. The …
2.1 FAIBLE
CVE-2025-8808A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been rated as problematic. This issue affects the function exportOrder of the file /tianti-module-admin/user/ajax/sa…
2.1 FAIBLE
CVE-2025-7061A vulnerability was found in Intelbras InControl up to 2.21.60.9. It has been declared as problematic. This vulnerability affects unknown code of the file /v1/operador/. The manipu…
2.0 FAIBLE
CVE-2025-1421Data provided in a request performed to the server while activating a new device are put in a database. Other high privileged users might download this data as a CSV file and corru…
2.4 FAIBLE
CVE-2024-53921An issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. An attacker can create arbitrary folders in the system permission directory via a symbolic link durin…
2.8 FAIBLE
CVE-2021-24016An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbitrary commands via cra…
3.7 FAIBLE