https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 12:59:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-280919 EUVD-2026-280919 https://cve.radiocsirt.org/vuln/euvd-2026-280919 https://cve.radiocsirt.org/vuln/fkie_cve-2023-53929 <p>phpMyFAQ 3.1.12 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into their profile names. Attackers can modify their user profile name with a payload like &#39;calc|a!z|&#39; to trigger code execution when an administrator exports user data as a CSV file.</p> <p>phpMyFAQ 3.1.12 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into their profile names. Attackers can modify their user profile name with a payload like &#39;calc|a!z|&#39; to trigger code execution when an administrator exports user data as a CSV file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-53929 https://cve.radiocsirt.org/vuln/ghsa-x2v3-9p22-w3x6 <p><strong>Affected:</strong> Packagist: thorsten/phpmyfaq, Packagist: phpmyfaq/phpmyfaq</p> <p>phpMyFAQ 3.1.12 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into their profile names. Attackers can modify their user profile name with a payload like &#39;calc|a!z|&#39; to trigger code execution when an administrator exports user data as a CSV file.</p> <p><strong>Affected:</strong> Packagist: thorsten/phpmyfaq, Packagist: phpmyfaq/phpmyfaq</p> <p>phpMyFAQ 3.1.12 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into their profile names. Attackers can modify their user profile name with a payload like &#39;calc|a!z|&#39; to trigger code execution when an administrator exports user data as a CSV file.</p> https://cve.radiocsirt.org/vuln/ghsa-x2v3-9p22-w3x6