High severity8.8NVD Advisory· Published Mar 28, 2018· Updated Jun 17, 2026
CVE-2018-9107
CVE-2018-9107
Description
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:acyba:acymailing:*:*:*:*:*:joomla\!:*:*+ 1 more
- cpe:2.3:a:acyba:acymailing:*:*:*:*:*:joomla\!:*:*range: <=5.9.5
- (no CPE)range: <5.9.6
Patches
Vulnerability mechanics
References
4- www.exploit-db.com/exploits/44369/nvdExploitThird Party AdvisoryVDB Entry
- vel.joomla.org/articles/2140-introducing-csv-injectionnvdThird Party Advisory
- vel.joomla.org/resolved/2136-acymailing-5-9-5-csv-injectionnvdThird Party Advisory
- www.acyba.com/acymailing/change-log.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.