Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-10018 State: PUBLISHED Published: 2018-07-13T17:00:00 Last Updated: 2024-08-05T07:32:00.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45017/ - http://seclists.org/fulldisclosure/2018/Jul/55
CVE ID: CVE-2018-10021 State: PUBLISHED Published: 2018-04-11T17:00:00 Last Updated: 2024-08-05T07:32:00.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/scsi/libsas/sas_scsi_host.c in the Linux kernel before 4.16 allows local users to cause a denial of service (ata qc leak) by triggering certain failure conditions. NOTE: a third party disputes the relevance of this report because the failure can only occur for physically proximate attackers who unplug SAS Host Bus Adapter cables Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3678-2/ - https://usn.ubuntu.com/3696-1/ - https://usn.ubuntu.com/3678-1/ - https://bugzilla.suse.com/sh
/usn.ubuntu.com/3678-2/ - https://usn.ubuntu.com/3696-1/ - https://usn.ubuntu.com/3678-1/ - https://bugzilla.suse.com/show_bug.cgi?id=1089281 - https://usn.ubuntu.com/3754-1/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html - https://usn.ubuntu.com/3678-3/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=318aaf34f1179b39fa9c30fa0f3288b645beee39 - https://github.com/torvalds/linux/commit/318aaf34f1179b39fa9c30fa0f3288b645beee39 - https://usn.ubuntu.com/3696-2/ - https://usn.ubuntu.com/3678-4/
CVE ID: CVE-2018-10023 State: PUBLISHED Published: 2018-04-11T17:00:00Z Last Updated: 2024-09-17T03:28:32.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun (aka an authenticated comment). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xwlrbh/Catfish/issues/1
CVE ID: CVE-2018-10024 State: PUBLISHED Published: 2018-04-11T17:00:00Z Last Updated: 2024-09-17T03:13:37.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: ubiQuoss Switch VP5208A creates a bcm_password file at /cgi-bin/ with the user credentials in cleartext when a failed login attempt occurs. The file can be reached via an HTTP request. The credentials can be used to access the system via SSH (or TELNET if it is enabled). Additional Analyst Notes: - CVE Program Container: References: - https://www.tarlogic.com/advisories/Tarlogic-2018-002.txt
CVE ID: CVE-2018-10026 State: PUBLISHED Published: 2018-04-11T18:00:00 Last Updated: 2024-08-05T07:32:00.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SukaraLin/Drops/blob/master/YZMCMSxss.md
CVE ID: CVE-2018-10027 State: PUBLISHED Published: 2018-05-17T12:00:00 Last Updated: 2024-08-05T07:32:00.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESTsoft ALZip before 10.76 allows local users to execute arbitrary code via creating a malicious .DLL file and installing it in a specific directory: %PROGRAMFILES%\ESTsoft\ALZip\Formats, %PROGRAMFILES%\ESTsoft\ALZip\Coders, %PROGRAMFILES(X86)%\ESTsoft\ALZip\Formats, or %PROGRAMFILES(X86)%\ESTsoft\ALZip\Coders. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/XHMeS7pQ - https://www.altools.co.kr/Support/Notice_Contents.aspx?idx=1640&page=1&t=2
CVE ID: CVE-2018-10028 State: PUBLISHED Published: 2018-04-11T18:00:00Z Last Updated: 2024-09-17T02:37:05.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: joyplus-cms 1.6.0 allows remote attackers to obtain sensitive information via a direct request to the install/ or log/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joyplus/joyplus-cms/issues/422
CVE ID: CVE-2018-10029 State: PUBLISHED Published: 2018-04-11T19:00:00Z Last Updated: 2024-09-16T16:28:44.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1_name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zxyxx/cmsms_vul
CVE ID: CVE-2018-10030 State: PUBLISHED Published: 2018-04-11T19:00:00Z Last Updated: 2024-09-17T04:08:54.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/siteprefs.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zxyxx/cmsms_vul
CVE ID: CVE-2018-10031 State: PUBLISHED Published: 2018-04-11T19:00:00Z Last Updated: 2024-09-16T21:08:16.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/moduleinterface.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zxyxx/cmsms_vul
CVE ID: CVE-2018-10032 State: PUBLISHED Published: 2018-04-11T19:00:00Z Last Updated: 2024-09-16T18:14:12.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1_version parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zxyxx/cmsms_vul
CVE ID: CVE-2018-10033 State: PUBLISHED Published: 2018-04-11T19:00:00Z Last Updated: 2024-09-16T19:47:30.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (aka CMSMS) 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zxyxx/cmsms_vul
CVE ID: CVE-2018-10048 State: PUBLISHED Published: 2018-04-11T20:00:00Z Last Updated: 2024-09-16T19:30:28.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/RVdpLAT8
CVE ID: CVE-2018-10049 State: PUBLISHED Published: 2018-04-11T20:00:00Z Last Updated: 2024-09-16T16:24:11.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: iScripts eSwap v2.4 has XSS via the "registration_settings.php" txtDate parameter in the Admin Panel. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/QbhRJp4q
CVE ID: CVE-2018-10050 State: PUBLISHED Published: 2018-04-11T20:00:00Z Last Updated: 2024-09-17T04:25:41.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: iScripts eSwap v2.4 has SQL injection via the "registration_settings.php" ddlFree parameter in the Admin Panel. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/UDEsFq3u
CVE ID: CVE-2018-10051 State: PUBLISHED Published: 2018-04-11T20:00:00Z Last Updated: 2024-09-16T19:52:16.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: iScripts SupportDesk v4.3 has XSS via the staff/inteligentsearchresult.php txtinteligentsearch parameter. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/aQn3Cr2G
CVE ID: CVE-2018-10052 State: PUBLISHED Published: 2018-04-11T20:00:00Z Last Updated: 2024-09-16T20:57:47.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: iScripts SupportDesk v4.3 has XSS via the admin/inteligentsearchresult.php txtinteligentsearch parameter. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/aeqYLK9u
CVE ID: CVE-2018-10054 State: PUBLISHED Published: 2018-04-11T00:00:00 Last Updated: 2024-08-05T07:32:00.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Java code. NOTE: the vendor's position is "h2 is not designed to be run outside of a secure environment." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://forum.datomic.com/t/important-security-update-0-9-5697/379 - https://www.exploit-db.com/exploits/44422/ - http://blog.datomic.com/2018/03/important-security-update.html - https://mthbernar
/www.exploit-db.com/exploits/44422/ - http://blog.datomic.com/2018/03/important-security-update.html - https://mthbernardes.github.io/rce/2018/03/14/abusing-h2-database-alias.html - https://lists.apache.org/thread.html/582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e%40%3Cuser.ignite.apache.org%3E - https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540%40%3Ccommits.nifi.apache.org%3E - https://github.com/h2database/h2database/issues/1225 - https://github.com/h2database/h2database/issues/3099 - https://github.com/h2database/h2database/issues/1808#issuecomment-599203115 - https://security.netapp.com/advisory/ntap-20240719-0003/
CVE ID: CVE-2018-10055 State: PUBLISHED Published: 2019-04-24T16:17:53 Last Updated: 2024-08-05T07:32:00.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-006.md
CVE ID: CVE-2018-10057 State: PUBLISHED Published: 2018-06-05T21:00:00 Last Updated: 2024-08-05T07:32:00.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary locations on the server due to missing basedir restrictions (absolute directory traversal). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tintinweb/pub/tree/master/pocs/cve-2018-10057 - http://www.openwall.com/lists/oss-security/2018/06/03/1
CVE ID: CVE-2018-10058 State: PUBLISHED Published: 2018-06-05T21:00:00 Last Updated: 2024-08-05T07:32:01.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-only, poolquota, and save command handlers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tintinweb/pub/tree/master/pocs/cve-2018-10058 - http://www.openwall.com/lists/oss-security/2018/06/03/1
CVE ID: CVE-2018-10059 State: PUBLISHED Published: 2018-04-12T16:00:00 Last Updated: 2024-08-05T07:32:00.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti before 1.1.37 has XSS because the get_current_page function in lib/functions.php relies on $_SERVER['PHP_SELF'] instead of $_SERVER['SCRIPT_NAME'] to determine a page name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/issues/1457 - https://www.cacti.net/changelog.php - http://www.securitytracker.com/id/1040620
CVE ID: CVE-2018-10060 State: PUBLISHED Published: 2018-04-12T16:00:00 Last Updated: 2024-08-05T07:32:00.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitize_uri function in lib/functions.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/issues/1457 - https://www.cacti.net/changelog.php - http://www.securitytracker.com/id/1040620 - https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html
CVE ID: CVE-2018-10061 State: PUBLISHED Published: 2018-04-12T16:00:00 Last Updated: 2024-08-05T07:32:00.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib/html.php is not used). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/issues/1457 - https://www.cacti.net/changelog.php - http://www.securitytracker.com/id/1040620 - https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html
CVE ID: CVE-2018-10063 State: PUBLISHED Published: 2018-04-12T19:00:00 Last Updated: 2024-08-05T07:32:00.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44447/ - https://www.tassos.gr/blog/convert-forms-2-0-4-security-release - https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/
CVE ID: CVE-2018-10066 State: PUBLISHED Published: 2018-04-13T13:00:00 Last Updated: 2024-08-05T07:32:00.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate verification allows a remote unauthenticated attacker capable of intercepting client traffic to act as a malicious OpenVPN server. This may allow the attacker to gain access to the client's internal network (for example, at site-to-site tunnels). Additional Analyst Notes: - CVE Program Container: References: - https://janis-streib.de/2018/04/11/mikrotik-openvpn-security
CVE ID: CVE-2018-10068 State: PUBLISHED Published: 2018-04-12T18:00:00 Last Updated: 2024-08-05T07:32:01.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jDownloads extension before 3.2.59 for Joomla! has XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.jdownloads.com/index.php/news/264-jdownloads-3-2-59-published.html - https://www.exploit-db.com/exploits/44471/ - https://vel.joomla.org/resolved/2150-jdownloads-3-2-58-xss-cross-site-scripting
CVE ID: CVE-2018-10070 State: PUBLISHED Published: 2018-04-16T21:00:00 Last Updated: 2024-08-05T07:32:01.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sending a crafted FTP request on port 21 that begins with many '\0' characters, preventing the affected router from accepting new FTP connections. The router will reboot after 10 minutes, logging a "router was rebooted without proper shutdown" message. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/147183/MikroTik-6.41.4-Denial-Of
lyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/147183/MikroTik-6.41.4-Denial-Of-Service.html - https://www.exploit-db.com/exploits/44450/
CVE ID: CVE-2018-10071 State: PUBLISHED Published: 2018-04-12T18:00:00Z Last Updated: 2024-09-17T01:10:47.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953826DB DeviceIoControl call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigric3/windrvr1260_poc4
CVE ID: CVE-2018-10072 State: PUBLISHED Published: 2018-04-12T18:00:00Z Last Updated: 2024-09-16T20:07:06.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953827bf DeviceIoControl call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigric3/windrvr1260_poc3
CVE ID: CVE-2018-10073 State: PUBLISHED Published: 2018-04-12T18:00:00 Last Updated: 2024-08-05T07:32:00.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: joyplus-cms 1.6.0 has XSS in manager/admin_vod.php via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joyplus/joyplus-cms/issues/423
CVE ID: CVE-2018-10074 State: PUBLISHED Published: 2018-04-12T18:00:00 Last Updated: 2024-08-05T07:32:00.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hi3660_stub_clk_probe function in drivers/clk/hisilicon/clk-hi3660-stub.c in the Linux kernel before 4.16 allows local users to cause a denial of service (NULL pointer dereference) by triggering a failure of resource retrieval. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9903e41ae1f5d50c93f268ca3304d4d7c64b9311 - https://github.com/torvalds/linux/commit/9903e41ae1f5d50c93f268ca3304d4d7c64b9311
CVE ID: CVE-2018-10075 State: PUBLISHED Published: 2018-07-02T16:00:00 Last Updated: 2024-08-05T07:32:00.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/eventlog/release-notes.html
CVE ID: CVE-2018-10076 State: PUBLISHED Published: 2018-07-02T16:00:00 Last Updated: 2024-08-05T07:32:00.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zoho ManageEngine EventLog Analyzer 11.12. A Cross-Site Scripting vulnerability allows a remote attacker to inject arbitrary web script or HTML via the search functionality (the search box of the Dashboard). Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/eventlog/release-notes.html
CVE ID: CVE-2018-10077 State: PUBLISHED Published: 2018-04-20T21:00:00 Last Updated: 2024-08-05T07:32:01.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44493/ - http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html
CVE ID: CVE-2018-10078 State: PUBLISHED Published: 2018-04-20T21:00:00 Last Updated: 2024-08-05T07:32:01.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44493/ - http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html
CVE ID: CVE-2018-10079 State: PUBLISHED Published: 2018-04-20T21:00:00 Last Updated: 2024-08-05T07:32:00.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating (1) config.xml or (2) servers.xml. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44493/ - http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html
CVE ID: CVE-2018-10080 State: PUBLISHED Published: 2018-04-13T04:00:00Z Last Updated: 2024-09-16T23:40:44.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunction with a crafted admin cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44393/
CVE ID: CVE-2018-10081 State: PUBLISHED Published: 2018-04-13T05:00:00Z Last Updated: 2024-09-16T19:04:45.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cve/blob/master/README.md
CVE ID: CVE-2018-10082 State: PUBLISHED Published: 2018-04-13T05:00:00Z Last Updated: 2024-09-16T22:51:49.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (CMSMS) through 2.2.7 allows physical path leakage via an invalid /index.php?page= value, a crafted URI starting with /index.php?mact=Search, or a direct request to /admin/header.php, /admin/footer.php, /lib/tasks/class.ClearCache.task.php, or /lib/tasks/class.CmsSecurityCheck.task.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cve/blob/master/README.md
CVE ID: CVE-2018-10083 State: PUBLISHED Published: 2018-04-13T05:00:00Z Last Updated: 2024-09-17T02:56:33.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard via directory traversal sequences in the val parameter within a cmd=del request, because code under modules\FilePicker does not restrict the val parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cve/blob/master/README.md
CVE ID: CVE-2018-10084 State: PUBLISHED Published: 2018-04-13T05:00:00Z Last Updated: 2024-09-16T17:23:04.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (CMSMS) through 2.2.6 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within $_COOKIE[$this->_loginkey] to equal 1, because an SHA-1 cryptographic protection mechanism can be bypassed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cve/blob/master/README.md
CVE ID: CVE-2018-10085 State: PUBLISHED Published: 2018-04-13T05:00:00Z Last Updated: 2024-09-17T00:56:36.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (CMSMS) through 2.2.6 allows PHP object injection because of an unserialize call in the _get_data function of \lib\classes\internal\class.LoginOperations.php. By sending a crafted cookie, a remote attacker can upload and execute code, or delete files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cve/blob/master/README.md
CVE ID: CVE-2018-10086 State: PUBLISHED Published: 2018-04-13T05:00:00Z Last Updated: 2024-09-16T19:05:45.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary code execution vulnerability in the admin dashboard because the implementation uses "eval('function testfunction'.rand()" and it is possible to bypass certain restrictions on these "testfunction" functions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/cve/blob/master/README.md