Archive
11 February 2019
Vulnerabilities first published on this day (UTC), newest first.
47 results · Feed
-
Unscored —
Frog CMS 0.9.5 provides a directory listing for a /public request.
-
Unscored —
Traq 3.7.1 allows SQL Injection via a tickets?search= URI.
-
Unscored —
Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1).
-
Unscored —
admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IM…
-
Unscored —
Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.
-
Unscored —
admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code…
-
Unscored —
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc …