Contact Form 7 to Database Extension Plugin 2.10.32 on WordPress ExportToCsvUtf8.php Spreadsheet input validation

Summaryinfo

A vulnerability classified as critical has been found in Contact Form 7 to Database Extension Plugin 2.10.32 on WordPress. This affects an unknown part of the file ExportToCsvUtf8.php. Performing a manipulation as part of Spreadsheet results in input validation. This vulnerability is identified as CVE-2018-9035. The attack can be initiated remotely. Additionally, an exploit exists.

Detailsinfo

A vulnerability classified as critical has been found in Contact Form 7 to Database Extension Plugin 2.10.32 on WordPress (WordPress Plugin). This affects some unknown processing of the file ExportToCsvUtf8.php. The manipulation as part of a Spreadsheet leads to a input validation vulnerability. CWE is classifying the issue as CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form.

The bug was discovered 03/31/2018. The weakness was released 04/04/2018 as EDB-ID 44367 as not defined exploit (Exploit-DB). The advisory is shared at exploit-db.com. This vulnerability is uniquely identified as CVE-2018-9035 since 03/26/2018. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details and a public exploit are known.

After immediately, there has been an exploit disclosed. The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 4 days. During that time the estimated underground price was around $0-$5k. By approaching the search of inurl:ExportToCsvUtf8.php it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Exploit-DB (44367). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• WordPress Plugin

Name

• Contact Form 7 to Database Extension Plugin

Version

• 2.10.32

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion