The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within export data and then triggered in exported data viewers.
References
| Link | Resource |
|---|---|
| https://www.themissinglink.com.au/security-advisories/cve-2022-40294 | Third Party Advisory |
Configurations
History
25 Oct 2023, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within export data and then triggered in exported data viewers. |
03 Nov 2022, 02:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.themissinglink.com.au/security-advisories/cve-2022-40294 - Third Party Advisory | |
| First Time |
Phppointofsale php Point Of Sale
Phppointofsale |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | CWE-1236 | |
| CPE | cpe:2.3:a:phppointofsale:php_point_of_sale:19.0:*:*:*:*:*:*:* |
31 Oct 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-31 21:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-40294
Mitre link : CVE-2022-40294
CVE.ORG link : CVE-2022-40294
JSON object : View
Products Affected
phppointofsale
- php_point_of_sale
CWE
CWE-1236
Improper Neutralization of Formula Elements in a CSV File