Skip to content
OpenAdvisories

Archive

5 February 2018

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2018-6609 Public exploit

    SQL Injection exists in the JSP Tickets 1.1 component for Joomla! via the ticketcode parameter in a ticketlist edit act…

  • Unscored —
    CVE-2018-6610 Public exploit

    Information Leakage exists in the jLike 1.0 component for Joomla! via a task=getUserByCommentId request.

  • Unscored —
    CVE-2018-6604 Public exploit

    SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetai…

  • Unscored —
    CVE-2018-6605 Public exploit Scanner template EPSS 58%

    SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, ge…

  • Unscored —
    CVE-2018-6582 Public exploit

    SQL Injection exists in the Zh GoogleMap 8.4.0.0 component for Joomla! via the id parameter in a getPlacemarkDetails, g…

  • Unscored —
    CVE-2017-9414 Public exploit EPSS 15%

    Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote att…