Skip to content
OpenAdvisories

Archive

31 October 2017

Vulnerabilities first published on this day (UTC), newest first.

46 results · Feed

  • Unscored —
    CVE-2017-15987 Public exploit

    Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter.

  • Unscored —
    CVE-2017-15980 Public exploit

    US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter.

  • Unscored —
    CVE-2017-15982 Public exploit

    Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form edit…

  • Unscored —
    CVE-2017-15988 Public exploit

    Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-200…

  • Unscored —
    CVE-2017-15981 Public exploit

    Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for f…

  • Unscored —

    EMC RSA Authentication Manager 8.2 SP1 P4 and earlier contains a reflected cross-site scripting vulnerability that coul…