Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-14926 State: PUBLISHED Published: 2018-08-03T21:00:00 Last Updated: 2024-08-05T09:46:24.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matera Banco 1.0.0 allows CSRF, as demonstrated by a /contingency/web/messageSend/messageSendHandler.jsp request. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9
CVE ID: CVE-2018-14927 State: PUBLISHED Published: 2018-08-03T21:00:00 Last Updated: 2024-08-05T09:46:24.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matera Banco 1.0.0 is vulnerable to path traversal (allowing access to system files outside the default application folder) via the /contingency/servlet/ServletFileDownload file parameter, related to /contingency/web/receiptQuery/receiptDisplay.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9
CVE ID: CVE-2018-14928 State: PUBLISHED Published: 2018-08-03T21:00:00 Last Updated: 2024-08-05T09:46:24.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: /contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9
CVE ID: CVE-2018-14929 State: PUBLISHED Published: 2018-08-03T21:00:00 Last Updated: 2024-08-05T09:46:24.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matera Banco 1.0.0 is vulnerable to multiple reflected XSS, as demonstrated by the /contingency/web/index.jsp (aka home page) url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9
CVE ID: CVE-2018-14930 State: PUBLISHED Published: 2019-04-30T18:56:59 Last Updated: 2024-08-05T09:46:24.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. CSRF can occur via a /CollatWebApp/gcmsRefInsert?name=SUPP URI. Additional Analyst Notes: - CVE Program Container: References: - https://neetech18.blogspot.com/2019/03/polaris-intellect-core-banking-software.html
CVE ID: CVE-2018-14931 State: PUBLISHED Published: 2019-04-30T18:50:27 Last Updated: 2024-08-05T09:46:24.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. An open redirect exists via a /IntellectMain.jsp?IntellectSystem= URI. Additional Analyst Notes: - CVE Program Container: References: - https://neetech18.blogspot.com/2019/03/polaris-intellect-core-banking-software_31.html
CVE ID: CVE-2018-14933 State: PUBLISHED Published: 2018-08-04T19:00:00.000Z Last Updated: 2025-10-21T23:45:49.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/45070/ - https://www.exploit-db.com/exploits/46340/
CVE ID: CVE-2018-14934 State: PUBLISHED Published: 2018-11-15T20:00:00 Last Updated: 2024-08-05T09:46:24.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone. Additional Analyst Notes: - CVE Program Container: References: - https://support.polycom.com/content/dam/polycom-support/global/documentation/bluetooth-authentication-weakness-trio.pdf
CVE ID: CVE-2018-14935 State: PUBLISHED Published: 2018-11-15T20:00:00 Last Updated: 2024-08-05T09:46:24.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web administration console on Polycom Trio devices with software before 5.5.4 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://support.polycom.com/content/dam/polycom-support/global/documentation/stored-cross-site-scripting-in-trio.pdf
CVE ID: CVE-2018-14936 State: PUBLISHED Published: 2018-08-05T01:00:00 Last Updated: 2024-08-05T09:46:24.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Add page option in my little forum 2.4.12 allows XSS via the Title field. Additional Analyst Notes: - CVE Program Container: References: - http://owendarlene.com/stored-xss-my-little-forum/
CVE ID: CVE-2018-14937 State: PUBLISHED Published: 2018-08-05T01:00:00 Last Updated: 2024-08-05T09:46:24.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field. Additional Analyst Notes: - CVE Program Container: References: - http://owendarlene.com/stored-xss-my-little-forum/
CVE ID: CVE-2018-14938 State: PUBLISHED Published: 2018-08-05T03:00:00 Last Updated: 2024-08-05T09:46:25.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle_80211, which will result in an out-of-bounds read and may allow access to sensitive memory (or a denial of service). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/simsong/tcpflow/commit/a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb - https://gi
Container: References: - https://github.com/simsong/tcpflow/commit/a4e1cd14eb5ccc51ed271b65b3420f7d692c40eb - https://github.com/simsong/tcpflow/issues/182 - https://usn.ubuntu.com/3955-1/ - https://lists.debian.org/debian-lts-announce/2020/11/msg00046.html
CVE ID: CVE-2018-14939 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_app_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles the realpath function in certain environments such as FreeBSD libc, which might allow attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact if LibreOffice is automatically launched during web browsing with pathnames controlled by a remote web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105047 - https://bugs
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105047 - https://bugs.documentfoundation.org/show_bug.cgi?id=118514
CVE ID: CVE-2018-14940 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPCMS 9 allows remote attackers to cause a denial of service (resource consumption) via large font_size, height, and width parameters in an api.php?op=checkcode request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/m0us3Sun/PHPCMS-v9/issues/1
CVE ID: CVE-2018-14941 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Harmonic NSG 9000 devices allow remote authenticated users to read the webapp.py source code via a direct request for the /webapp.py URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pudding2/NSG9000/blob/master/exp.txt
CVE ID: CVE-2018-14942 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Harmonic NSG 9000 devices allow remote authenticated users to conduct directory traversal attacks, as demonstrated by "POST /PY/EMULATION_GET_FILE" or "POST /PY/EMULATION_EXPORT" with FileName=../../../passwd in the POST data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pudding2/NSG9000/blob/master/exp.txt
CVE ID: CVE-2018-14943 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Harmonic NSG 9000 devices have a default password of nsgadmin for the admin account, a default password of nsgguest for the guest account, and a default password of nsgconfig for the config account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pudding2/NSG9000/blob/master/exp.txt
CVE ID: CVE-2018-14944 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in jpeg_encoder through 2015-11-27. It is a SEGV in the function readFromBMP in jpeg_encoder.cpp. The signal is caused by an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thejinchao/jpeg_encoder/issues/4 - https://github.com/fouzhe/security/tree/master/jpeg_encoder#segv-in-function-readfrombmp
CVE ID: CVE-2018-14945 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in jpeg_encoder through 2015-11-27. It is a heap-based buffer overflow in the function readFromBMP in jpeg_encoder.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fouzhe/security/tree/master/jpeg_encoder#heap-buffer-overflow-in-function-readfrombmp - https://github.com/thejinchao/jpeg_encoder/issues/6
CVE ID: CVE-2018-14946 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched Memory Management Routines (malloc versus operator delete). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/19 - https://github.com/fouzhe/security/tree/master/pdf2json#alloc_dealloc_mismatch-in-function-htmlstring
CVE ID: CVE-2018-14947 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in PDF2JSON 0.69. XmlFontAccu::CSStyle in XmlFonts.cc has Mismatched Memory Management Routines (operator new [] versus operator delete). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/20 - https://github.com/fouzhe/security/tree/master/pdf2json#alloc_dealloc_mismatch-in-function-csstyle
CVE ID: CVE-2018-14948 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in dilawar sound through 2017-11-27. The end of openWavFile in wav-file.cc has Mismatched Memory Management Routines (operator new [] versus operator delete). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fouzhe/security/tree/master/sound#alloc-dealloc-mismatch-in-function-openwavfile - https://github.com/dilawar/sound/issues/4
CVE ID: CVE-2018-14950 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href=" attack. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/squirrelmail/bugs/2831/ - http://www.openwall.com/lists/oss-security/2018/07/26/2 - https://bugs.debian.org/905023 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVXTYMZ35IC5KPNMAE6BWAQWURMX7KZO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.
VXTYMZ35IC5KPNMAE6BWAQWURMX7KZO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5FP5O562A4FM5TCFNEW73SS6PZONSAC/
CVE ID: CVE-2018-14951 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data:text" attack. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/squirrelmail/bugs/2831/ - http://www.openwall.com/lists/oss-security/2018/07/26/2 - https://bugs.debian.org/905023 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVXTYMZ35IC5KPNMAE6BWAQWURMX7KZO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproj
ge/CVXTYMZ35IC5KPNMAE6BWAQWURMX7KZO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5FP5O562A4FM5TCFNEW73SS6PZONSAC/
CVE ID: CVE-2018-14952 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink:href=" attack. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/squirrelmail/bugs/2831/ - http://www.openwall.com/lists/oss-security/2018/07/26/2 - https://bugs.debian.org/905023 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVXTYMZ35IC5KPNMAE6BWAQWURMX7KZO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
ssage/CVXTYMZ35IC5KPNMAE6BWAQWURMX7KZO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5FP5O562A4FM5TCFNEW73SS6PZONSAC/
CVE ID: CVE-2018-14953 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:25.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href=" attack. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/squirrelmail/bugs/2831/ - http://www.openwall.com/lists/oss-security/2018/07/26/2 - https://bugs.debian.org/905023 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVXTYMZ35IC5KPNMAE6BWAQWURMX7KZO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.or
TYMZ35IC5KPNMAE6BWAQWURMX7KZO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5FP5O562A4FM5TCFNEW73SS6PZONSAC/
CVE ID: CVE-2018-14954 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:25.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/squirrelmail/bugs/2831/ - http://www.openwall.com/lists/oss-security/2018/07/26/2 - https://bugs.debian.org/905023 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVXTYMZ35IC5KPNMAE6BWAQWURMX7KZO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/me
35IC5KPNMAE6BWAQWURMX7KZO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5FP5O562A4FM5TCFNEW73SS6PZONSAC/
CVE ID: CVE-2018-14955 State: PUBLISHED Published: 2018-08-05T18:00:00 Last Updated: 2024-08-05T09:46:24.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute). Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/squirrelmail/bugs/2831/ - http://www.openwall.com/lists/oss-security/2018/07/26/2 - https://bugs.debian.org/905023 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVXTYMZ35IC5KPNMAE6BWAQWURMX7KZO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
CVE ID: CVE-2018-14956 State: PUBLISHED Published: 2018-09-28T00:00:00 Last Updated: 2024-08-05T09:46:25.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://imgur.com/a/buXJJKC - http://packetstormsecurity.com/files/149571/CMS-ISWEB-3.5.3-SQL-Injection.html - https://cxsecurity.com/issue/WLB-2018090249
CVE ID: CVE-2018-14957 State: PUBLISHED Published: 2018-09-28T00:00:00 Last Updated: 2024-08-05T09:46:24.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by moduli/downloadFile.php?file=oggetto_documenti/../.././inc/config.php (one can take the control of the application because credentials are present in that config.php file). Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2018090248
CVE ID: CVE-2018-14958 State: PUBLISHED Published: 2018-08-05T19:00:00Z Last Updated: 2024-09-17T00:46:04.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings (such as the theme, title, and description) via index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alterebro/WeaselCMS/issues/6
CVE ID: CVE-2018-14959 State: PUBLISHED Published: 2018-08-05T19:00:00Z Last Updated: 2024-09-16T20:59:01.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WeaselCMS v0.3.5. CSRF can create new pages via an index.php?b=pages&a=new URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alterebro/WeaselCMS/issues/6
CVE ID: CVE-2018-14960 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:24.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xiao5uCompany 1.7 has CSRF via admin/Admin.asp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/cve/Xiao5uCompany_1.7_csrf.doc - http://blog.whiterabbitxyj.com/cve/Xiao5uCompany_1.7_csrf.doc
CVE ID: CVE-2018-14961 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:24.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: dl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sql parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/ZZCMS/blob/master/README.md - https://blog.csdn.net/weixin_42813492/article/details/81240523
CVE ID: CVE-2018-14962 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:25.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: zzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/ZZCMS/blob/master/README.md
CVE ID: CVE-2018-14963 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:24.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/ZZCMS/blob/master/README.md
CVE ID: CVE-2018-14964 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:24.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/emlsoft/blob/master/README.md
CVE ID: CVE-2018-14965 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:24.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/emlsoft/blob/master/README.md
CVE ID: CVE-2018-14966 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:25.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/emlsoft/blob/master/README.md
CVE ID: CVE-2018-14967 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:24.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/emlsoft/blob/master/README.md
CVE ID: CVE-2018-14968 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:25.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/emlsoft/blob/master/README.md
CVE ID: CVE-2018-14969 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:25.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/QCMS/blob/master/README.md
CVE ID: CVE-2018-14970 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:24.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/QCMS/blob/master/README.md
CVE ID: CVE-2018-14971 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:25.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/user.php has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/QCMS/blob/master/README.md
CVE ID: CVE-2018-14972 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:24.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/QCMS/blob/master/README.md
CVE ID: CVE-2018-14973 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:25.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/QCMS/blob/master/README.md
CVE ID: CVE-2018-14974 State: PUBLISHED Published: 2018-08-06T15:00:00 Last Updated: 2024-08-05T09:46:24.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/news.php has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AvaterXXX/QCMS/blob/master/README.md