Skip to content
OpenAdvisories

Vendor

zhblue

2 known vulnerabilities.

Products

hustoj 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.2
    CVE-2026-23873

    HUSTOJ is Vulnerable to Stored CSV Injection (Formula Injection) in Contest Rank Export

    hustoj is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training. All versions are vulnerable to CSV Injection (Formula Injection) through the contest rank export functionality (contestrank.xls.php and admin/ranklist_export.ph…

    zhblue hustoj