Archive
30 December 2018
Vulnerabilities first published on this day (UTC), newest first.
29 results · Feed
-
Unscored —
TEMMOKU T1.09 Beta allows admin/user/add CSRF.
-
Unscored —
UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_filee…
-
Unscored —
UCMS 1.4.7 has ?do=user_addpost CSRF.
-
Unscored —
imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.…
-
Unscored —
Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URIs, as demo…
-
Unscored —
imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI.
-
Unscored —
UCMS 1.4.7 has XSS via the dir parameter in an index.php sadmin_fileedit action.
-
Unscored —
Lei Feng TV CMS (aka LFCMS) 3.8.6 allows full path disclosure via the /install.php?s=/1 URI.
-
Unscored —
imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI.
-
Unscored —
imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI.
-
Unscored —
UCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action.
-
Unscored —
UWA 2.3.11 allows index.php?g=admin&c=admin&a=add_admin_do CSRF.
-
Unscored —
imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/ch…
-
Unscored —
public\install\install.php in CIM 0.9.3 allows remote attackers to reload the product via the public/install/#/step3 UR…
-
Unscored —
Lei Feng TV CMS (aka LFCMS) 3.8.6 allows admin.php?s=/Member/add.html CSRF.
-
Unscored —
sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.
-
Unscored —
imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.p…
-
Unscored —
imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter.
-
High 8.8
Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons
A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful.
-
Unscored —
A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted…
-
Medium 6.1
Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons
An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.
-
Unscored —
Jspxcms v9.0.0 allows SSRF.
-
Unscored —
Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pictures.php …
-
Unscored —
In Mini-XML (aka mxml) v2.12, there is stack-based buffer overflow in the scan_file function in mxmldoc.c.
-
Unscored —
Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID.
-
Unscored —
In Mini-XML (aka mxml) v2.12, there is a use-after-free in the mxmlAdd function of the mxml-node.c file. Remote attacke…
-
Unscored —
lib/support/unicodeconv/unicodeconv.c in libotfcc.a in otfcc v0.10.3-alpha has a buffer over-read.
-
Unscored —
JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to th…
-
Medium 6.1
PHP League CommonMark vulnerable to Cross-Site Scripting (XSS)
Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML (even if allow_unsafe_links is false) via a newline character (e.g., writing jav…