Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-9592 State: PUBLISHED Published: 2019-02-12T00:00:00Z Last Updated: 2024-09-17T02:47:16.783Z Vendors: Android Products: Android Problem Types: Information disclosure Description: In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116319076. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106495 - https://source.android.com/security/
s: - CVE Program Container: References: - http://www.securityfocus.com/bid/106495 - https://source.android.com/security/bulletin/2019-01-01.html
CVE ID: CVE-2018-9593 State: PUBLISHED Published: 2019-02-12T00:00:00Z Last Updated: 2024-09-17T02:17:02.894Z Vendors: Android Products: Android Problem Types: Information disclosure Description: In llcp_dlc_proc_i_pdu of llcp_dlc.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116722267. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106495 - https://source.androi
al Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106495 - https://source.android.com/security/bulletin/2019-01-01.html
CVE ID: CVE-2018-9594 State: PUBLISHED Published: 2019-02-12T00:00:00Z Last Updated: 2024-09-16T20:16:30.106Z Vendors: *** n/a *** Products: Android Problem Types: Information disclosure Description: In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-116791157. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106495 - https://source.andr
onal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106495 - https://source.android.com/security/bulletin/2019-01-01.html
CVE ID: CVE-2018-9838 State: PUBLISHED Published: 2018-04-06T18:00:00 Last Updated: 2024-08-05T07:24:56.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted object. Additional Analyst Notes: - CVE Program Container: References: - https://caml.inria.fr/mantis/view.php?id=7765 - https://security.gentoo.org/glsa/202007-48
CVE ID: CVE-2018-9839 State: PUBLISHED Published: 2019-06-06T18:17:04 Last Updated: 2024-08-05T07:24:56.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MantisBT through 1.3.14, and 2.0.0. Using a crafted request on bug_report_page.php (modifying the 'm_id' parameter), any user with REPORTER access or above is able to view any private issue's details (summary, description, steps to reproduce, additional information) when cloning it. By checking the 'Copy issue notes' and 'Copy attachments' checkboxes and completing the clone operation, this data also becomes public (except private notes). Additional Analyst Notes: - CVE Program Container: References:
on, this data also becomes public (except private notes). Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=24221 - https://github.com/mantisbt/mantisbt/commit/1fbcd9bca2f2c77cb61624d36ddee4b3802c38ea
CVE ID: CVE-2018-9840 State: PUBLISHED Published: 2018-04-10T05:00:00 Last Updated: 2024-08-05T07:24:56.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Open Whisper Signal app before 2.23.2 for iOS allows physically proximate attackers to bypass the screen locker feature via certain rapid sequences of actions that include app opening, clicking on cancel, and using the home button. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/signalapp/Signal-iOS/commit/018a35df7b42b4941cb4dfc9f462b37c3fafd9e9 - https://github.com/signalapp/Signal-iOS/commits/release/2.23.2 - http://nint.en.do/Signal-Bypass-Screen-locker.php
CVE ID: CVE-2018-9841 State: PUBLISHED Published: 2018-04-07T07:00:00 Last Updated: 2024-08-05T07:24:56.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: The export function in libavfilter/vf_signature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=35eeff30caf34df835206f1c12bcf4b7c2bd6758 - https://security.gentoo.org/glsa/202003-65
CVE ID: CVE-2018-9842 State: PUBLISHED Published: 2018-04-12T15:00:00 Last Updated: 2024-08-05T07:24:56.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replaying a logon message. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44428/ - https://www.redteam-pentesting.de/en/advisories/rt-sa-2017-015/-cyberark-password-vault-memory-disclosure - http://seclists.org/fulldisclosure/2018/Apr/19 - http://www.securitytracker.com/id/1040674 - https://www.exploit-db.com/exploits/45926/ - https://www.exploit-db.com/exploits
://www.securitytracker.com/id/1040674 - https://www.exploit-db.com/exploits/45926/ - https://www.exploit-db.com/exploits/44829/ - http://www.securityfocus.com/archive/1/541931/100/0/threaded
CVE ID: CVE-2018-9843 State: PUBLISHED Published: 2018-04-12T15:00:00 Last Updated: 2024-08-05T07:24:56.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a serialized .NET object in an Authorization HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Apr/18 - http://www.securitytracker.com/id/1040675 - https://www.exploit-db.com/exploits/44429/ - https://www.redteam-pentesting.de/en/advisories/rt-sa-2017-014/-cyberark-password-vault-web-access-remote-code-execution - http://ww
redteam-pentesting.de/en/advisories/rt-sa-2017-014/-cyberark-password-vault-web-access-remote-code-execution - http://www.securityfocus.com/archive/1/541932/100/0/threaded
CVE ID: CVE-2018-9844 State: PUBLISHED Published: 2018-04-07T07:00:00 Last Updated: 2024-08-05T07:24:56.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44444/ - https://www.iptanus.com/new-version-4-3-4-of-wordpress-file-upload-plugin/ - https://wordpress.org/plugins/wp-file-upload/#developers
CVE ID: CVE-2018-9845 State: PUBLISHED Published: 2018-04-29T18:00:00 Last Updated: 2024-08-05T07:24:56.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etherpad Lite before 1.6.4 is exploitable for admin access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ether/etherpad-lite/commit/ffe24c3dd93efc73e0cbf924db9a0cc40be9511b - https://github.com/ether/etherpad-lite/blob/develop/CHANGELOG.md
CVE ID: CVE-2018-9846 State: PUBLISHED Published: 2018-04-07T21:00:00 Last Updated: 2024-08-05T07:24:56.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's possible to exploit the unsanitized, user-controlled "_uid" parameter (in an archive.php _task=mail&_mbox=INBOX&_action=plugin.move2archive request) to perform an MX (IMAP) injection attack by placing an IMAP command after a %0d%0a sequence. NOTE: this is less easily exploitable in 1.3.4 and later because of a Same Origin Policy protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://github.com
Origin Policy protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/issues/6238 - https://www.debian.org/security/2018/dsa-4181 - https://github.com/roundcube/roundcubemail/issues/6229 - https://medium.com/%40ndrbasi/cve-2018-9846-roundcube-303097048b0a
CVE ID: CVE-2018-9847 State: PUBLISHED Published: 2018-04-07T21:00:00 Last Updated: 2024-08-05T07:24:56.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to execute arbitrary PHP code by placing this code into a template. Additional Analyst Notes: - CVE Program Container: References: - http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-update-template-getshell/index.html
CVE ID: CVE-2018-9848 State: PUBLISHED Published: 2018-04-07T21:00:00 Last Updated: 2024-08-05T07:24:56.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Gxlcms QY v1.0.0713, the upload function in Lib\Lib\Action\Admin\UploadAction.class.php allows remote attackers to execute arbitrary PHP code by first using an Admin-Admin-Configsave request to change the config[upload_class] value from jpg,gif,png,jpeg to jpg,gif,png,jpeg,php and then making an Admin-Upload-Upload request. Additional Analyst Notes: - CVE Program Container: References: - http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-upload-getshell/index.html
CVE ID: CVE-2018-9849 State: PUBLISHED Published: 2018-05-10T14:00:00 Last Updated: 2024-08-05T07:24:56.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulse Secure Pulse Connect Secure 8.1.x before 8.1R14, 8.2.x before 8.2R11, and 8.3.x before 8.3R5 do not properly process nested XML entities, which allows remote attackers to cause a denial of service (memory consumption and memory errors) via a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104160 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730
CVE ID: CVE-2018-9850 State: PUBLISHED Published: 2018-04-08T02:00:00Z Last Updated: 2024-09-17T01:10:40.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\DataAction.class.php allows remote attackers to delete any file via directory traversal sequences in the id parameter of an Admin-Data-del request. Additional Analyst Notes: - CVE Program Container: References: - http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-filedelete/index.html
CVE ID: CVE-2018-9851 State: PUBLISHED Published: 2018-04-08T02:00:00Z Last Updated: 2024-09-17T02:31:58.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to read any file via a modified pathname in an Admin-Tpl request, as demonstrated by use of '|' instead of '/' as a directory separator, in conjunction with a ".." sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-DirectoryTraversal/index.html
CVE ID: CVE-2018-9852 State: PUBLISHED Published: 2018-04-08T02:00:00Z Last Updated: 2024-09-16T20:48:05.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Gxlcms QY v1.0.0713, Lib\Lib\Action\Home\HitsAction.class.php allows remote attackers to read data from a database by embedding a FROM clause in a query string within a Home-Hits request, as demonstrated hy sid=user,password%20from%20mysql.user%23. Additional Analyst Notes: - CVE Program Container: References: - http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-sqli/index.html
CVE ID: CVE-2018-9853 State: PUBLISHED Published: 2018-07-10T14:00:00 Last Updated: 2024-08-05T07:24:56.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure access control in freeSSHd version 1.3.1 allows attackers to obtain the privileges of the freesshd.exe process by leveraging the ability to login to an unprivileged account on the server. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40TheWindowsTwin/vulnerability-in-freesshd-5a0abc147d7a
CVE ID: CVE-2018-9856 State: PUBLISHED Published: 2018-04-09T07:00:00Z Last Updated: 2024-09-16T20:22:43.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as demonstrated by triggering a permission change via a /admin-document/@@share request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kotti/Kotti/issues/551
CVE ID: CVE-2018-9857 State: PUBLISHED Published: 2018-04-09T07:00:00 Last Updated: 2024-08-05T07:24:56.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" screen). Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/Y9uEC4nu - https://www.exploit-db.com/exploits/44486/
CVE ID: CVE-2018-9859 State: PUBLISHED Published: 2018-06-15T21:00:00 Last Updated: 2024-08-05T07:24:56.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The path of Whale update service was unquoted in NAVER Whale before 1.0.40.7. This vulnerability can be used for persistent privilege escalation if it's available to create an executable file with System privilege by other vulnerable applications. Additional Analyst Notes: - CVE Program Container: References: - https://cve.naver.com/detail/cve-2018-9859.html
CVE ID: CVE-2018-9860 State: PUBLISHED Published: 2018-04-12T05:00:00 Last Updated: 2024-08-05T07:24:56.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when processing malformed TLS-CBC ciphertext could cause the receiving side to include in the HMAC computation exactly 64K bytes of data following the record buffer, aka an over-read. The MAC comparison will subsequently fail and the connection will be closed. This could be used for denial of service. No information leak occurs. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detai
curs. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7434 - https://botan.randombit.net/security.html
CVE ID: CVE-2018-9861 State: PUBLISHED Published: 2018-04-19T17:00:00 Last Updated: 2024-08-05T07:24:56.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in versions 4.5.10 through 4.9.1; fixed in 4.9.2), as used in Drupal 8 before 8.4.7 and 8.5.x before 8.5.2 and other products, allows remote attackers to inject arbitrary web script through a crafted IMG element. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ckeditor/ckeditor-dev/blob/master/CHANGES.md - https://www.drupal.org/sa-core-2018-003 - http://www.securityfocus.com/bid/103924 - https:/
dev/blob/master/CHANGES.md - https://www.drupal.org/sa-core-2018-003 - http://www.securityfocus.com/bid/103924 - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
CVE ID: CVE-2018-9862 State: PUBLISHED Published: 2018-04-09T16:00:00 Last Updated: 2024-08-05T07:24:56.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: util.c in runV 1.0.0 for Docker mishandles a numeric username, which allows attackers to obtain root access by leveraging the presence of an initial numeric value on an /etc/passwd line, and then issuing a "docker exec" command with that value in the -u argument, a similar issue to CVE-2016-3697. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103738 - https://github.com/hyperhq/hyperstart/pull/348
CVE ID: CVE-2018-9864 State: PUBLISHED Published: 2018-04-09T17:00:00 Last Updated: 2024-08-05T07:24:56.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-live-chat-support/#developers - https://www.youtube.com/watch?v=eHG1pWaez9w - https://www.gubello.me/blog/wp-live-chat-support-8-0-05-stored-xss/
CVE ID: CVE-2018-9866 State: PUBLISHED Published: 2018-08-03T20:00:00.000Z Last Updated: 2025-05-05T19:08:14.640Z Vendors: SonicWall Products: Global Management System (GMS) Problem Types: CWE-77 Description: A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://twitter.com/ddouhine/status/1019251292202586112 - https://github.com/rapid7/metasploit-framework/pull/10305 - https://psirt.global.sonicwa
ne/status/1019251292202586112 - https://github.com/rapid7/metasploit-framework/pull/10305 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0007
CVE ID: CVE-2018-9867 State: PUBLISHED Published: 2019-02-19T21:00:00 Last Updated: 2024-08-05T07:24:56.351Z Vendors: SonicWall Products: SonicOS, SonicOSv Problem Types: CWE-285 Description: In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366
SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V). Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0017 - https://www.tenable.com/security/research/tra-2019-08
CVE ID: CVE-2018-9918 State: PUBLISHED Published: 2018-04-10T18:00:00 Last Updated: 2024-08-05T07:24:56.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service (stack exhaustion), related to the QPDFObjectHandle and QPDF_Dictionary classes, because nesting in direct objects is not restricted. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3638-1/ - https://github.com/qpdf/qpdf/commit/b4d6cf6836ce025ba1811b7bbec52680c7204223 - https://github.com/qpdf/qpdf/issues/202
CVE ID: CVE-2018-9919 State: PUBLISHED Published: 2018-05-02T21:00:00 Last Updated: 2024-08-05T07:24:56.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution, because /vendor/phpdocumentor/reflection-docblock/tests/phpDocumentor/Reflection/DocBlock/Tag/LinkTagTeet.php writes data from the "down_url" URL into the "bddlj" local file if the attacker knows the backdoor "jmmy" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/f
ws the backdoor "jmmy" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/11
CVE ID: CVE-2018-9920 State: PUBLISHED Published: 2018-05-24T13:00:00 Last Updated: 2024-08-05T07:24:56.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server side request forgery exists in the runtime application in K2 smartforms 4.6.11 via a modified hostname in an https://*/Identity/STS/Forms/Scripts URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/542035/100/0/threaded
CVE ID: CVE-2018-9921 State: PUBLISHED Published: 2018-04-23T18:00:00 Last Updated: 2024-08-05T07:24:56.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible to determine the existence of files and directories outside the web-site installation directory, and determine whether a file has contents matching a specified checksum. The attack uses an admin/checksum.php?__c= request. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/0xn1k5/ef4c7c7a26c7d8a803ef3a85f1000c98
CVE ID: CVE-2018-9922 State: PUBLISHED Published: 2018-04-10T06:00:00 Last Updated: 2024-08-05T07:24:56.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in idreamsoft iCMS through 7.0.7. Physical path leakage exists via an invalid nickname field that reveals a core/library/weixin.class.php pathname. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/16
CVE ID: CVE-2018-9923 State: PUBLISHED Published: 2018-04-10T06:00:00 Last Updated: 2024-08-05T07:24:56.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/17
CVE ID: CVE-2018-9924 State: PUBLISHED Published: 2018-04-10T06:00:00 Last Updated: 2024-08-05T07:24:56.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in idreamsoft iCMS through 7.0.7. SQL injection exists via the pid array parameter in an admincp.php?app=tag&do=save&frame=iPHP request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/19
CVE ID: CVE-2018-9925 State: PUBLISHED Published: 2018-04-10T06:00:00 Last Updated: 2024-08-05T07:24:56.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in idreamsoft iCMS through 7.0.7. XSS exists via the nickname field in an admincp.php?app=user&do=save&frame=iPHP request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/18
CVE ID: CVE-2018-9926 State: PUBLISHED Published: 2018-04-10T06:00:00 Last Updated: 2024-08-05T07:24:56.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add an admin account via index.php?m=core&f=power&v=add. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/6/ - https://www.exploit-db.com/exploits/44439/ - https://github.com/wuzhicms/wuzhicms/issues/128