Vulnerabilidades de Anviz Biometric Technology Co., Ltd.
CVEs publicadas que afetam produtos de Anviz Biometric Technology Co., Ltd.: 1 registro(s), com severidade, exploração e correções.
CVE-2018-25135
Crítica · 9.8
CWE-149 24/12/2025
Anviz AIM CrossChex Standard 4.3.6.0 CSV Injection via User Import
Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user import fields. Attackers can craft payloads in fields like 'Name', 'Gender', or 'Position' to trigger Excel macro execution when importing user data.