Skip to content
OpenAdvisories

Archive

16 January 2017

Vulnerabilities first published on this day (UTC), newest first.

2 results · Feed

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in CMS Made Simple before 2.1.6 allows remote attackers to hijack the a…

  • Medium 5.5
    CVE-2017-5223 Public exploit

    Local file disclosure in PHPMailer

    An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script…