CVE-2018-9107

ALTO 8.8CVE-2018-9107 · Published 28/03/2018 · updated 17/06/2026

En resumen

CVE-2018-9107 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a acymailing (acyba).
Probabilidad de explotación en los próximos 30 días (EPSS): 7.0%, mayor que el 94.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
acymailing acyba	`≤ 5.9.5`	No fix yet

Description

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export.

References

vel.joomla.org/articles/2140-introducing-csv-injection · Third Party Advisory
vel.joomla.org/resolved/2136-acymailing-5-9-5-csv-injection · Third Party Advisory
acyba.com/acymailing/change-log.html · Vendor Advisory
exploit-db.com/exploits/44369 · Exploit

Más vulnerabilidades de acymailing

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free