CVE-2018-17408

ALTO 7.8CVE-2018-17408 · Published 03/10/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
zahir enterprise plus zahiraccounting	`= 6`	No fix yet

Description

Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute arbitrary code via a crafted CSV file that is accessed through the Import CSV File menu.

References

blog.spentera.id/zahir-accounting-enterprise-plus-6 · Exploit
exploit-db.com/exploits/45505 · Exploit
exploit-db.com/exploits/45560 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free