EDB-44367

PoC

WordPress Plugin Contact Form 7 to Database Extension 2.10.32 - CSV Injection

view exploit source exploit_dbtype webappsauthor Stefan Broederpublished 2018-03-30catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-9035UScritical9.6Exploit
CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas i…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan