| Package | Affected versions | Patched versions |
|---|---|---|
| itop | = 3.1.0-2-11973 |
CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a crafted script to the export-v2.php and ajax.render.php components.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free