CVE-2018-9106: High severity Acyba Acysms Joomla\! vulnerability
Published Mar 28, 2018
·Updated
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extension before 3.5.1 for Joomla! via a value that is mishandled in a CSV export.
Affected Software
1 affected component
Acyba Acysms Joomla\!<=3.5.0
Event History
Mar 28, 2018
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Data Sourced
via NVD·04:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9106?
CVE-2018-9106 is classified as a medium severity vulnerability due to its potential for exploitation in CSV export features.
2
How do I fix CVE-2018-9106?
To fix CVE-2018-9106, update the Acyba AcySMS extension to version 3.5.1 or later.
3
What does CVE-2018-9106 exploit?
CVE-2018-9106 exploits the mishandling of values in the CSV export feature of the Acyba AcySMS extension.
4
What kind of vulnerability is CVE-2018-9106?
CVE-2018-9106 is a CSV Injection vulnerability, also known as Excel Macro Injection or Formula Injection.
5
What is affected by CVE-2018-9106?
CVE-2018-9106 affects versions of the Acyba AcySMS extension prior to 3.5.1 for Joomla!