Skip to content
OpenAdvisories

Archive

18 July 2019

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2019-13961 Public exploit

    A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files…

  • Unscored —
    CVE-2019-13956 Public exploit

    Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demo…

  • Critical 9.8
    CVE-2019-1010268 Public exploit

    Improper Restriction of XML External Entity Reference in ladon

    Ladon since 0.6.1 (since ebef0aae48af78c159b6fce81bc6f5e7e0ddb059) is affected by: XML External Entity (XXE). The impact is: Information Disclosure, reading files and reaching internal network endpoints. The component is: SOAP request handlers. For instance: …

  • High 8.8
    CVE-2019-1010054 Public exploit

    Dolibarr Cross Site Request Forgery (CSRF)

    Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encrypta…