https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:01:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-230585 EUVD-2026-230585 https://cve.radiocsirt.org/vuln/euvd-2026-230585 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9102 <p>phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet product. Thus, this could lead to CSV Formula Injection. NOTE: This vulnerability will not be addressed, the maintainer&#39;s position is that it is not the intention of phpLDAPadmin to control what data Administrators can put in their LDAP database, nor filter it on export.</p> <p>phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet product. Thus, this could lead to CSV Formula Injection. NOTE: This vulnerability will not be addressed, the maintainer&#39;s position is that it is not the intention of phpLDAPadmin to control what data Administrators can put in their LDAP database, nor filter it on export.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-9102 https://cve.radiocsirt.org/vuln/ghsa-p8hv-f2qg-cxvv <p>phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet product. Thus, this could lead to CSV Formula Injection.</p> <p>phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet product. Thus, this could lead to CSV Formula Injection.</p> https://cve.radiocsirt.org/vuln/ghsa-p8hv-f2qg-cxvv https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-9102 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: phpldapadmin, Ubuntu:18.04:LTS: phpldapadmin, Ubuntu:20.04:LTS: phpldapadmin, Ubuntu:22.04:LTS: phpldapadmin, Ubuntu:24.04:LTS: phpldapadmin, Ubuntu:25.10: phpldapadmin, Ubuntu:26.04:LTS: phpldapadmin</p> <p>phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet product. Thus, this could lead to CSV Formula Injection. NOTE: This vulnerability will not be addressed, the maintainer&#39;s position is that it is not the intention of phpLDAPadmin to control what data Administrators can put in their LDAP database, nor filter it on export.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: phpldapadmin, Ubuntu:18.04:LTS: phpldapadmin, Ubuntu:20.04:LTS: phpldapadmin, Ubuntu:22.04:LTS: phpldapadmin, Ubuntu:24.04:LTS: phpldapadmin, Ubuntu:25.10: phpldapadmin, Ubuntu:26.04:LTS: phpldapadmin</p> <p>phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value (CSV) file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet product. Thus, this could lead to CSV Formula Injection. NOTE: This vulnerability will not be addressed, the maintainer&#39;s position is that it is not the intention of phpLDAPadmin to control what data Administrators can put in their LDAP database, nor filter it on export.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-9102