Skip to content
OpenAdvisories

Archive

21 October 2018

Vulnerabilities first published on this day (UTC), newest first.

4 results · Feed

  • Unscored —

    ServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an authenticated user.

  • Unscored —

    There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function Proc…

  • Unscored —

    Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.

  • Critical 9.8

    ThinkPHP SQLi Vulnerability

    ThinkPHP 3.2.4 has SQL Injection via the order parameter because the Library/Think/Db/Driver.class.php parseOrder function mishandles the key variable.