CVE-2018-9107

概要

参考情報

• vel.joomla.org/articles/2140-introducing-csv-injection · Third Party Advisory
• vel.joomla.org/resolved/2136-acymailing-5-9-5-csv-injection · Third Party Advisory
• acyba.com/acymailing/change-log.html · Vendor Advisory
• exploit-db.com/exploits/44369 · Exploit

acymailing のその他の脆弱性

• CVE-2020-10934高 7.2Acyba AcyMailing before 6.9.2 mishandles file uploads by admins.
• CVE-2015-7338高 7.2SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php.