Skip to content
OpenAdvisories

Archive

1 November 2013

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Unscored —
    CVE-2013-5977 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for Word…

  • Medium —
    CVE-2013-3630 Public exploit EPSS 42%

    Moodle Authenticated Spelling Binary Remote Code Execution

    Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.