Archive
30 April 2014
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Unscored —CVE-2013-1807 Public exploit
PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web doc…
-
Unscored —CVE-2013-1806 Public exploit
Multiple directory traversal vulnerabilities in PHP-Fusion before 7.02.06 allow remote authenticated users to include a…
-
High —
Arbitrary code execution in Apache Commons BeanUtils
Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate…