Archive
21 October 2018
Vulnerabilities first published on this day (UTC), newest first.
4 results · Feed
-
Unscored —
ServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an authenticated user.
-
Unscored —
There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function Proc…
-
Unscored —
Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.
-
Critical 9.8
ThinkPHP SQLi Vulnerability
ThinkPHP 3.2.4 has SQL Injection via the order parameter because the Library/Think/Db/Driver.class.php parseOrder function mishandles the key variable.