Skip to content
OpenAdvisories

Vendor

poweradmin

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.9

    Poweradmin: CSV Injection in log export endpoints allows formula execution in spreadsheet applications

    Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 are vulnerable to CSV Injection (Formula Injection) in its log export functionality. User-controlled data — specifically the username field — is written t…