Skip to content
OpenAdvisories

Archive

16 February 2019

Vulnerabilities first published on this day (UTC), newest first.

5 results · Feed

  • Unscored —

    Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value.

  • Unscored —

    Themerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data_2.php cate parameter.

  • Unscored —

    PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTM…

  • Unscored —

    DedeCMS through V5.7SP2 allows arbitrary file upload in dede/album_edit.php or dede/album_add.php, as demonstrated by a…

  • Unscored —

    In Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles is enabled.