Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ified login attempts to the Portal login page. An exploit could allow the attacker to identify existing users and perform brute-force password attacks on the Portal, as demonstrated by navigating to the user/4 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gleez/cms/issues/802
CVE ID: CVE-2018-16704 State: PUBLISHED Published: 2018-09-07T17:00:00 Last Updated: 2024-08-05T10:32:52.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Gleez CMS v1.2.0. Because of an Insecure Direct Object Reference vulnerability, it is possible for attackers (logged in users) to view profile page of other users, as demonstrated by navigating to user/3 on demo.gleezcms.org. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gleez/cms/issues/801
CVE ID: CVE-2018-16705 State: PUBLISHED Published: 2018-09-10T17:00:00 Last Updated: 2024-08-05T10:32:53.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and passwords. This includes the Admin and Service user accounts and their unsalted MD5 hashes, as well as the SMS server password in cleartext. Additional Analyst Notes: - CVE Program Container: References: - https://cyberskr.com/blog/furuno-felcom.html - https://gist.github.com/CyberSKR/c00eabd6b1d5603d724b615ab358ff31
CVE ID: CVE-2018-16706 State: PUBLISHED Published: 2018-09-14T21:00:00 Last Updated: 2024-08-05T10:32:53.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080. Additional Analyst Notes: - CVE Program Container: References: - http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html
CVE ID: CVE-2018-16709 State: PUBLISHED Published: 2018-09-07T19:00:00Z Last Updated: 2024-09-17T02:11:44.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices allow remote attackers to read or write to files via crafted PJL commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45332/
CVE ID: CVE-2018-16710 State: PUBLISHED Published: 2018-09-07T19:00:00Z Last Updated: 2024-09-17T02:11:01.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with "blind port forwarding ... Putting OctoPrint onto the public internet is a terrible idea, and I really can't emphasize that enough. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/foosel/OctoPrint/issues/2814
CVE ID: CVE-2018-16711 State: PUBLISHED Published: 2018-09-26T22:00:00 Last Updated: 2024-08-05T10:32:53.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL (0x9C402088) with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for input. Additional Analyst Notes: - CVE Program Container: References: - https://downwithup.github.io/CVEPosts.html
CVE ID: CVE-2018-16712 State: PUBLISHED Published: 2018-09-26T22:00:00 Last Updated: 2024-08-05T10:32:53.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory. Additional Analyst Notes: - CVE Program Container: References: - https://downwithup.github.io/CVEPosts.html
CVE ID: CVE-2018-16713 State: PUBLISHED Published: 2018-09-26T22:00:00 Last Updated: 2024-08-05T10:32:53.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL (0x9C402084) with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for input, and provide output from the instruction. Additional Analyst Notes: - CVE Program Container: References: - https://downwithup.github.io/CVEPosts.html
CVE ID: CVE-2018-16715 State: PUBLISHED Published: 2018-09-08T10:00:00Z Last Updated: 2024-09-17T01:56:11.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. The security permissions on the %ProgramData%\CTES folder and sub-folders may allow write access to low-privileged user accounts. This allows unauthorized replacement of service program executable (EXE) or dynamically loadable library (DLL) files, causing elevated (SYSTEM) user access. Configuration control files or data files under this folder could also be similarly modified to affect service process behavior. Additional Analyst Notes: - CV
es under this folder could also be similarly modified to affect service process behavior. Additional Analyst Notes: - CVE Program Container: References: - https://community.absolute.com/s/article/Absolute-Security-Bulletin-ASB1
CVE ID: CVE-2018-16716 State: PUBLISHED Published: 2019-05-02T19:19:48 Last Updated: 2024-08-05T10:32:53.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files (i.e., significant information disclosure) or file deletion via the nph-viewgif.cgi query string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grymer/CVE/blob/master/CVE-2018-16716.md
CVE ID: CVE-2018-16717 State: PUBLISHED Published: 2019-05-02T19:25:16 Last Updated: 2024-08-05T10:32:53.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grymer/CVE/blob/master/CVE-2018-16717.md
CVE ID: CVE-2018-16718 State: PUBLISHED Published: 2019-05-02T19:27:17 Last Updated: 2024-08-05T10:32:53.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grymer/CVE/blob/master/CVE-2018-16718.md
CVE ID: CVE-2018-16719 State: PUBLISHED Published: 2020-11-23T20:33:41 Last Updated: 2024-08-05T10:32:52.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jingyun Antivirus v2.4.2.39, the driver file (hookbody.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00221482. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bsauce/poc/tree/master/jingyun_antivirus_00221482 - https://www.cnvd.org.cn/flaw/show/CNVD-2018-19268
CVE ID: CVE-2018-16720 State: PUBLISHED Published: 2020-11-23T20:33:27 Last Updated: 2024-08-05T10:32:53.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x1236001c, a related issue to CVE-2018-16304. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bsauce/poc/tree/master/jingyun_antivirus_1236001c - https://www.cnvd.org.cn/flaw/show/CNVD-2018-19267
CVE ID: CVE-2018-16721 State: PUBLISHED Published: 2020-11-23T20:33:21 Last Updated: 2024-08-05T10:32:53.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360090, a related issue to CVE-2018-16306. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bsauce/poc/tree/master/jingyun_antivirus_12360090 - https://www.cnvd.org.cn/flaw/show/CNVD-2018-19266
CVE ID: CVE-2018-16722 State: PUBLISHED Published: 2020-11-23T20:33:18 Last Updated: 2024-08-05T10:32:54.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360094, a related issue to CVE-2018-16305. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bsauce/poc/tree/master/jingyun_antivirus_12360094 - https://www.cnvd.org.cn/flaw/show/CNVD-2018-19265
CVE ID: CVE-2018-16723 State: PUBLISHED Published: 2020-11-23T20:33:04 Last Updated: 2024-08-05T10:32:53.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12364020. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bsauce/poc/tree/master/jingyun_antivirus_12364020 - https://www.cnvd.org.cn/flaw/show/CNVD-2018-19264
CVE ID: CVE-2018-16724 State: PUBLISHED Published: 2018-09-08T15:00:00 Last Updated: 2024-08-05T10:32:53.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue is discovered in baijiacms V4. Blind SQL Injection exists via the order parameter in an index.php?act=index request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy961216/attack-baijiacmsV4-with-blind-sql-injection
CVE ID: CVE-2018-16725 State: PUBLISHED Published: 2018-09-08T15:00:00 Last Updated: 2024-08-05T10:32:53.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue is discovered in baijiacms V4. XSS exists via the assets/weengine/components/zclip/ZeroClipboard.swf id parameter, aka "Non-standard use of the flash component." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xxy961216/attack-baijiacmsV4-with-xss
CVE ID: CVE-2018-16726 State: PUBLISHED Published: 2018-09-12T16:00:00 Last Updated: 2024-08-05T10:32:53.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smiffy6969/razorCMS/issues/52
CVE ID: CVE-2018-16727 State: PUBLISHED Published: 2018-09-12T16:00:00 Last Updated: 2024-08-05T10:32:54.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smiffy6969/razorCMS/issues/51
CVE ID: CVE-2018-16728 State: PUBLISHED Published: 2018-09-12T16:00:00 Last Updated: 2024-08-05T10:32:53.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/frozeman/feindura-flat-file-cms/issues/29
CVE ID: CVE-2018-16729 State: PUBLISHED Published: 2018-09-12T16:00:00 Last Updated: 2024-08-05T10:32:54.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages->manage under admin.php?action=files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pluck-cms/pluck/issues/63
CVE ID: CVE-2018-16730 State: PUBLISHED Published: 2018-09-08T15:00:00 Last Updated: 2024-08-05T10:32:53.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: \upload\plugins\sys\Install.php in CScms 4.1 has XSS via the site name. Additional Analyst Notes: - CVE Program Container: References: - https://www.patec.cn/newsshow.php?cid=24&id=123 - https://github.com/AvaterXXX/CScms/blob/master/CScms_xss.md
CVE ID: CVE-2018-16731 State: PUBLISHED Published: 2018-09-08T15:00:00 Last Updated: 2024-08-05T10:32:53.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/CScms/blob/master/CScms_up.md - https://www.patec.cn/newsshow.php?cid=24&id=123
CVE ID: CVE-2018-16732 State: PUBLISHED Published: 2018-09-08T15:00:00 Last Updated: 2024-08-05T10:32:53.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: \upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save. Additional Analyst Notes: - CVE Program Container: References: - https://www.patec.cn/newsshow.php?cid=24&id=123 - https://github.com/AvaterXXX/CScms/blob/master/CScms_csrf.md
CVE ID: CVE-2018-16733 State: PUBLISHED Published: 2018-09-08T15:00:00 Last Updated: 2024-08-05T10:32:54.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ethereum/go-ethereum/commit/106d196ec4a6451efedc60ab15957f231fa85639
CVE ID: CVE-2018-16736 State: PUBLISHED Published: 2018-09-09T12:00:00 Last Updated: 2024-08-05T10:32:53.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the _whatfilter and _messages parameters (in the Filters section of the settings). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/issues/6437 - https://github.com/eagle00789/RC_Filters/issues/19 - https://www.exploit-db.com/exploits/45437/
CVE ID: CVE-2018-16737 State: PUBLISHED Published: 2018-10-10T00:00:00 Last Updated: 2024-08-05T10:32:54.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation. Additional Analyst Notes: - CVE Program Container: References: - http://www.tinc-vpn.org/git/browse?p=tinc%3Ba=commit%3Bh=d3297fbd3b8c8c8a4661f5bbf89aca5cacba8b5a - http://tinc-vpn.org/security/ - https://www.starwindsoftware.com/security/sw-20190227-0001/
CVE ID: CVE-2018-16738 State: PUBLISHED Published: 2018-10-10T00:00:00 Last Updated: 2024-08-05T10:32:54.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed in 1.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.tinc-vpn.org/git/browse?p=tinc%3Ba=commit%3Bh=d3297fbd3b8c8c8a4661f5bbf89aca5cacba8b5a - http://tinc-vpn.org/security/ - https://www.debian.org/security/2018/dsa-4312 - https://www.starwindsoftware.com/security/sw-20190227-0002/
CVE ID: CVE-2018-16739 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-09-11T19:33:34.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec.maride.cc/posts/abus/ - https://www.ccc.de/en/updates/2019/update-nicht-verfugbar-hersteller-nicht-zu-erreichen
CVE ID: CVE-2018-16741 State: PUBLISHED Published: 2018-09-13T16:00:00 Last Updated: 2024-08-05T10:32:53.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly sanitize shell metacharacters to prevent command injection. It is possible to use the ||, &&, or > characters within a file created by the "faxq-helper activate <jobid>" command. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty - https://www.debian.org/security/2018/dsa-4291 - https://lists.debian.org/debian-lts-announce/2018/09/msg00012.h
mgetty - https://www.debian.org/security/2018/dsa-4291 - https://lists.debian.org/debian-lts-announce/2018/09/msg00012.html
CVE ID: CVE-2018-16742 State: PUBLISHED Published: 2018-09-13T16:00:00 Last Updated: 2024-08-05T10:32:53.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow can be triggered via a command-line parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
CVE ID: CVE-2018-16743 State: PUBLISHED Published: 2018-09-13T16:00:00 Last Updated: 2024-08-05T10:32:53.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mgetty before 1.2.1. In contrib/next-login/login.c, the command-line parameter username is passed unsanitized to strcpy(), which can cause a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
CVE ID: CVE-2018-16744 State: PUBLISHED Published: 2018-09-13T16:00:00 Last Updated: 2024-08-05T10:32:54.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow for command injection if untrusted input can reach it, because popen is used. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
CVE ID: CVE-2018-16745 State: PUBLISHED Published: 2018-09-13T16:00:00 Last Updated: 2024-08-05T10:32:54.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow a buffer overflow if long untrusted input can reach it. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
CVE ID: CVE-2018-16749 State: PUBLISHED Published: 2018-09-09T15:00:00 Last Updated: 2024-08-05T10:32:53.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick6/commit/1007b98f8795ad4bea6bc5f68a32d83e982fdae4 - https://lists.debian.org/debian-lts-announce/2018/10/msg00002.html - https://usn.ubuntu.com/3785-1/ - https://github.com/ImageMagick/ImageMagick/issues/1119 - h
unce/2018/10/msg00002.html - https://usn.ubuntu.com/3785-1/ - https://github.com/ImageMagick/ImageMagick/issues/1119 - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2018-16750 State: PUBLISHED Published: 2018-09-09T15:00:00 Last Updated: 2024-08-05T10:32:53.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1118 - https://usn.ubuntu.com/3785-1/ - http://www.securityfocus.com/bid/108492
CVE ID: CVE-2018-16752 State: PUBLISHED Published: 2018-09-20T20:00:00 Last Updated: 2024-08-05T10:32:53.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/149297/LW-N605R-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/45351/
CVE ID: CVE-2018-16758 State: PUBLISHED Published: 2018-10-10T00:00:00 Last Updated: 2024-08-05T10:32:53.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets. Additional Analyst Notes: - CVE Program Container: References: - http://tinc-vpn.org/security/ - http://www.tinc-vpn.org/git/browse?p=tinc%3Ba=commit%3Bh=e97943b7cc9c851ae36f5a41e2b6102faa74193f - https://www.debian.org/security/2018/dsa-4312 - https://www.starwindsoftware.com/security/sw-20190227-0003/
CVE ID: CVE-2018-16759 State: PUBLISHED Published: 2018-09-09T21:00:00 Last Updated: 2024-08-05T10:32:53.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The removeXSS function in App/Common/common.php (called from App/Modules/Index/Action/SearchAction.class.php) in EasyCMS v1.4 allows XSS via an onhashchange event. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/teameasy/EasyCMS/issues/4
CVE ID: CVE-2018-16761 State: PUBLISHED Published: 2018-09-09T21:00:00 Last Updated: 2024-08-05T10:32:54.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eventum before 3.4.0 has an open redirect vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eventum/eventum/releases/tag/v3.4.0
CVE ID: CVE-2018-16762 State: PUBLISHED Published: 2018-09-09T21:00:00 Last Updated: 2024-08-05T10:32:53.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages/items. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/daylightstudio/FUEL-CMS/issues/478
CVE ID: CVE-2018-16763 State: PUBLISHED Published: 2018-09-09T21:00:00 Last Updated: 2024-08-05T10:32:54.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/daylightstudio/FUEL-CMS/issues/478 - https://0xd0ff9.wordpress.com/2019/07/19/from-code-evaluation-to-pre-auth-remote-code-execution-cve-2018-16763-bypass/ - https://www.exploit-db.com/exploits/47138 - http://packetstormsecurity.com/files/153696/fuelCMS-1.4.1-Remote-Code-Execution.htm
/www.exploit-db.com/exploits/47138 - http://packetstormsecurity.com/files/153696/fuelCMS-1.4.1-Remote-Code-Execution.html - http://packetstormsecurity.com/files/160080/Fuel-CMS-1.4-Remote-Code-Execution.html - http://packetstormsecurity.com/files/164756/Fuel-CMS-1.4.1-Remote-Code-Execution.html