Skip to content
OpenAdvisories

Archive

9 June 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-3187 Public exploit

    PHPGurukul Teachers Record Management System Profile Picture changeimage.php unrestricted upload

    A vulnerability, which was classified as critical, has been found in PHPGurukul Teachers Record Management System 1.0. Affected by this issue is some unknown functionality of the file /changeimage.php of the component Profile Picture Handler. The manipulation…

  • Medium 6.5
    CVE-2023-1430 Public exploit

    FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control

    The FluentCRM - Marketing Automation For WordPress plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 2.8.01 due to the use of an MD5 hash without a salt to control subscriptions. This makes it possible f…