Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.1.120 and earlier, FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote attackers to cause a denial of service (crash and reboot), via the callbackJson parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.foscam.com/company/securing-your-foscam-camera-important-notice.html - https://blog.vdoo.com/2018/06/06/vdoo-has-found-major-vulnerabilities-in-foscam-cameras/
CVE ID: CVE-2018-6834 State: PUBLISHED Published: 2018-02-08T07:00:00 Last Updated: 2024-08-05T06:17:15.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: static/js/pad_utils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ether/etherpad-lite/releases/tag/1.6.3 - https://github.com/ether/etherpad-lite/commit/a03422b09468cdd5f192b05643311c705447588b
CVE ID: CVE-2018-6835 State: PUBLISHED Published: 2018-02-08T07:00:00 Last Updated: 2024-08-05T06:17:15.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ether/etherpad-lite/releases/tag/1.6.3 - https://github.com/ether/etherpad-lite/commit/626e58cc5af1db3691b41fca7b06c28ea43141b1
CVE ID: CVE-2018-6836 State: PUBLISHED Published: 2018-02-08T07:00:00 Last Updated: 2024-08-05T06:17:15.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=28960d79cca262ac6b974f339697b299a1e28fef - https://bugs.wire
.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=28960d79cca262ac6b974f339697b299a1e28fef - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397 - https://code.wireshark.org/review/#/c/25660/
CVE ID: CVE-2018-6842 State: PUBLISHED Published: 2018-03-19T14:00:00 Last Updated: 2024-08-05T06:17:15.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kentico 10 before 10.0.50 and 11 before 11.0.3 has XSS in which a crafted URL results in improper construction of a system page. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/zamous/c0afd7e21f3111de873c7bef6dcd9dd7
CVE ID: CVE-2018-6843 State: PUBLISHED Published: 2018-03-19T14:00:00 Last Updated: 2024-08-05T06:17:15.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kentico 10 before 10.0.50 and 11 before 11.0.3 has SQL injection in the administration interface. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/zamous/c0afd7e21f3111de873c7bef6dcd9dd7
CVE ID: CVE-2018-6844 State: PUBLISHED Published: 2018-02-08T07:00:00 Last Updated: 2024-08-05T06:17:15.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen. Additional Analyst Notes: - CVE Program Container: References: - https://websecnerd.blogspot.com/2018/02/mybb-forum-1.html
CVE ID: CVE-2018-6845 State: PUBLISHED Published: 2018-02-12T03:00:00 Last Updated: 2024-08-05T06:17:15.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44016
CVE ID: CVE-2018-6846 State: PUBLISHED Published: 2018-02-08T16:00:00Z Last Updated: 2024-09-16T23:22:07.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Z-BlogPHP 1.5.1 allows remote attackers to discover the full path via a direct request to zb_system/function/lib/upload.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zblogcn/zblogphp/issues/176
CVE ID: CVE-2018-6849 State: PUBLISHED Published: 2018-04-01T18:00:00 Last Updated: 2024-08-05T06:17:15.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/pull/9538 - https://voidsec.com/vpn-leak/ - https://www.exploit-db.com/exploits/44403/ - https://news.ycombinator.com/item?id=16699270 - https://datarift.blogspot.com/p/private-ip-leakage-using-webr
s/44403/ - https://news.ycombinator.com/item?id=16699270 - https://datarift.blogspot.com/p/private-ip-leakage-using-webrtc.html
CVE ID: CVE-2018-6851 State: PUBLISHED Published: 2018-07-09T18:00:00 Last Updated: 2024-08-05T06:17:15.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80206040. By crafting an input buffer we can control the execution path to the point where the constant DWORD 0 will be written to a user-controlled address. We can take advantage of this condition to zero-out the pointer to the security descriptor in the object header of a privileged process or modify the security descriptor itself and run code in the context o
ptor in the object header of a privileged process or modify the security descriptor itself and run code in the context of a process running as SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://community.sophos.com/kb/en-us/131934 - http://seclists.org/fulldisclosure/2018/Jul/20 - https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/
CVE ID: CVE-2018-6852 State: PUBLISHED Published: 2018-07-09T18:00:00 Last Updated: 2024-08-05T06:17:16.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80202298. By crafting an input buffer we can control the execution path to the point where the nt!memset function is called to zero out contents of a user-controlled address. We can take advantage of this condition to zero-out the pointer to the security descriptor in the object header of a privileged process or modify the security descriptor itself and run code
e security descriptor in the object header of a privileged process or modify the security descriptor itself and run code in the context of a process running as SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://community.sophos.com/kb/en-us/131934 - http://seclists.org/fulldisclosure/2018/Jul/20 - https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/
CVE ID: CVE-2018-6853 State: PUBLISHED Published: 2018-07-09T18:00:00 Last Updated: 2024-08-05T06:17:16.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80206024. By crafting an input buffer we can control the execution path to the point where a global variable will be written to a user controlled address. We can take advantage of this condition to zero-out the pointer to the security descriptor in the object header of a privileged process or modify the security descriptor itself and run code in the context of a
r in the object header of a privileged process or modify the security descriptor itself and run code in the context of a process running as SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://community.sophos.com/kb/en-us/131934 - http://seclists.org/fulldisclosure/2018/Jul/20 - https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/
CVE ID: CVE-2018-6854 State: PUBLISHED Published: 2018-07-09T18:00:00 Last Updated: 2024-08-05T06:17:15.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via multiple IOCTLs, e.g., 0x8810200B, 0x8810200F, 0x8810201B, 0x8810201F, 0x8810202B, 0x8810202F, 0x8810203F, 0x8810204B, 0x88102003, 0x88102007, 0x88102013, 0x88102017, 0x88102027, 0x88102033, 0x88102037, 0x88102043, and 0x88102047. When some conditions in the user-controlled input buffer are not met, the driver writes an error code (0x2000001A) to a user-controlled addre
in the user-controlled input buffer are not met, the driver writes an error code (0x2000001A) to a user-controlled address. Also, note that all the aforementioned IOCTLs use transfer type METHOD_NEITHER, which means that the I/O manager does not validate any of the supplied pointers and buffer sizes. So, even though the driver checks for input/output buffer sizes, it doesn't validate if the pointers to those buffers are actually valid. So, we can supply a pointer for the output buffer to a kernel address space address, and the error code will be written there. We can take advantage of this condition to modify the SEP_TOKEN_PRIVILEGES structure of the Token object belonging to the exploit pro
dvantage of this condition to modify the SEP_TOKEN_PRIVILEGES structure of the Token object belonging to the exploit process and grant SE_DEBUG_NAME privilege. This allows the exploit process to interact with higher privileged processes running as SYSTEM and execute code in their security context. Additional Analyst Notes: - CVE Program Container: References: - https://community.sophos.com/kb/en-us/131934 - http://seclists.org/fulldisclosure/2018/Jul/20 - https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/
CVE ID: CVE-2018-6855 State: PUBLISHED Published: 2018-07-09T18:00:00 Last Updated: 2024-08-05T06:17:16.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x80202014. By crafting an input buffer we can control the execution path to the point where the constant 0xFFFFFFF will be written to a user-controlled address. We can take advantage of this condition to modify the SEP_TOKEN_PRIVILEGES structure of the Token object belonging to the exploit process and grant SE_DEBUG_NAME privilege. This allows the exploit process
of the Token object belonging to the exploit process and grant SE_DEBUG_NAME privilege. This allows the exploit process to interact with higher privileged processes running as SYSTEM and execute code in their security context. Additional Analyst Notes: - CVE Program Container: References: - https://community.sophos.com/kb/en-us/131934 - http://seclists.org/fulldisclosure/2018/Jul/20 - https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/
CVE ID: CVE-2018-6856 State: PUBLISHED Published: 2018-07-09T18:00:00 Last Updated: 2024-08-05T06:17:16.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x8020601C. By crafting an input buffer we can control the execution path to the point where a global variable will be written to a user controlled address. We can take advantage of this condition to zero-out the pointer to the security descriptor in the object header of a privileged process or modify the security descriptor itself and run code in the context of a
CVE ID: CVE-2018-6857 State: PUBLISHED Published: 2018-07-09T18:00:00 Last Updated: 2024-08-05T06:17:17.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x802022E0. By crafting an input buffer we can control the execution path to the point where the constant 0x12 will be written to a user-controlled address. We can take advantage of this condition to modify the SEP_TOKEN_PRIVILEGES structure of the Token object belonging to the exploit process and grant SE_DEBUG_NAME privilege. This allows the exploit process to i
he Token object belonging to the exploit process and grant SE_DEBUG_NAME privilege. This allows the exploit process to interact with higher privileged processes running as SYSTEM and execute code in their security context. Additional Analyst Notes: - CVE Program Container: References: - https://community.sophos.com/kb/en-us/131934 - http://seclists.org/fulldisclosure/2018/Jul/20 - https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/
CVE ID: CVE-2018-6858 State: PUBLISHED Published: 2018-02-12T03:00:00 Last Updated: 2024-08-05T06:17:16.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists in PHP Scripts Mall Facebook Clone Script. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44010
CVE ID: CVE-2018-6859 State: PUBLISHED Published: 2018-02-23T18:00:00 Last Updated: 2024-08-05T06:17:15.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44185/ - https://0day4u.wordpress.com/2018/02/22/schools-alert-management-script-2-0-2-authentication-bypass/
CVE ID: CVE-2018-6860 State: PUBLISHED Published: 2018-02-12T03:00:00 Last Updated: 2024-08-05T06:17:16.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script 2.0.2 via a profile picture. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44011
CVE ID: CVE-2018-6861 State: PUBLISHED Published: 2018-02-12T03:00:00 Last Updated: 2024-08-05T06:17:16.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists in PHP Scripts Mall Lawyer Search Script 1.0.2 via a profile update parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44012
CVE ID: CVE-2018-6862 State: PUBLISHED Published: 2018-02-12T03:00:00 Last Updated: 2024-08-05T06:17:16.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists in PHP Scripts Mall Bitcoin MLM Software 1.0.2 via a profile field. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44013
CVE ID: CVE-2018-6863 State: PUBLISHED Published: 2018-02-12T03:00:00 Last Updated: 2024-08-05T06:17:17.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in PHP Scripts Mall Select Your College Script 2.0.2 via a Login Parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44014
CVE ID: CVE-2018-6864 State: PUBLISHED Published: 2018-02-12T03:00:00 Last Updated: 2024-08-05T06:17:16.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists in PHP Scripts Mall Multi religion Responsive Matrimonial 4.7.2 via a user profile update parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44015
CVE ID: CVE-2018-6866 State: PUBLISHED Published: 2018-02-23T13:00:00 Last Updated: 2024-08-05T06:17:16.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists in PHP Scripts Mall Learning and Examination Management System Script 2.3.1 via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/44170
CVE ID: CVE-2018-6867 State: PUBLISHED Published: 2018-02-23T13:00:00.000Z Last Updated: 2025-03-19T19:30:42.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/44171 - https://github.com/WlX-33/PoC-for-CVE/blob/main/CVE-2018-6867/Alibaba%20Clone%20Script%201.0.2%20Cross%20Site%20Scripting.txt
CVE ID: CVE-2018-6868 State: PUBLISHED Published: 2018-02-23T13:00:00 Last Updated: 2024-08-05T06:17:16.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/44172
CVE ID: CVE-2018-6869 State: PUBLISHED Published: 2018-02-09T06:00:00 Last Updated: 2024-08-05T06:17:16.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103050 - https://usn.ubuntu.com/3699-1/ - https://github.com/gdraheim/zziplib/issues/22 - https://lists.debian.org/debian-lts-announce/2018/02/msg00022.html - https://lists.debian.org/debian-lts-a
b/issues/22 - https://lists.debian.org/debian-lts-announce/2018/02/msg00022.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00029.html
CVE ID: CVE-2018-6870 State: PUBLISHED Published: 2018-04-12T22:00:00 Last Updated: 2024-08-05T06:17:16.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected XSS exists in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search feature. Additional Analyst Notes: - CVE Program Container: References: - https://0day4u.wordpress.com/2018/03/19/website-seller-script-reflected-xss/
CVE ID: CVE-2018-6871 State: PUBLISHED Published: 2018-02-09T06:00:00 Last Updated: 2024-08-05T06:17:16.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44022/ - https://usn.ubuntu.com/3579-1/ - https://github.com/jollheef/libreoffice-remote-arbitrary-file-disclosure - https://access.redhat.com/errata/RHSA-2018:0517 - https://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-5-4-5&id=a916fc0
.redhat.com/errata/RHSA-2018:0517 - https://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-5-4-5&id=a916fc0c0e0e8b10cb4158fa0fa173fe205d434a - https://access.redhat.com/errata/RHSA-2018:0418 - https://www.libreoffice.org/about-us/security/advisories/cve-2018-1055/ - https://www.debian.org/security/2018/dsa-4111
CVE ID: CVE-2018-6872 State: PUBLISHED Published: 2018-02-09T06:00:00 Last Updated: 2024-08-05T06:17:16.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (out-of-bounds read and segmentation violation) via a note with a large alignment. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=22788 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Ba=commit%3Bh=ef135d4314fd4c2d7da66b9d7b59af4a85b0f7e6 - https://security.gentoo.org
/git/gitweb.cgi?p=binutils-gdb.git%3Ba=commit%3Bh=ef135d4314fd4c2d7da66b9d7b59af4a85b0f7e6 - https://security.gentoo.org/glsa/201811-17 - http://www.securityfocus.com/bid/103103 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html
CVE ID: CVE-2018-6873 State: PUBLISHED Published: 2018-04-04T17:00:00 Last Updated: 2024-08-05T06:17:16.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not validated. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103695 - https://auth0.com/docs/security/bulletins/cve-2018-6873
CVE ID: CVE-2018-6874 State: PUBLISHED Published: 2018-04-04T17:00:00 Last Updated: 2024-08-05T06:17:16.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF exists in the Auth0 authentication service through 14591 if the Legacy Lock API flag is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://auth0.com/docs/security/bulletins/cve-2018-6874 - http://www.securityfocus.com/bid/103695
CVE ID: CVE-2018-6875 State: PUBLISHED Published: 2018-03-14T13:00:00 Last Updated: 2024-08-05T06:17:16.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display (of information that should not be accessible), related to text containing characters that the device's font lacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.keepkey.com/2018/03/09/security-updates-responsible-disclosure/
CVE ID: CVE-2018-6876 State: PUBLISHED Published: 2018-02-09T18:00:00 Last Updated: 2024-08-05T06:17:17.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers to cause a denial of service (stack-based buffer under-read) via a crafted bmp image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103035 - https://github.com/ImageMagick/ImageMagick/issues/973
CVE ID: CVE-2018-6878 State: PUBLISHED Published: 2018-02-09T18:00:00Z Last Updated: 2024-09-17T01:36:33.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43991/
CVE ID: CVE-2018-6879 State: PUBLISHED Published: 2018-04-12T22:00:00 Last Updated: 2024-08-05T06:17:16.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code. Additional Analyst Notes: - CVE Program Container: References: - https://0day4u.wordpress.com/2018/03/12/website-seller-script-improper-validation-of-email-address/
CVE ID: CVE-2018-6880 State: PUBLISHED Published: 2018-02-12T03:00:00 Last Updated: 2024-08-05T06:17:16.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class/connect.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kongxin520/EmpireCMS/blob/master/EmpireCMS.md - https://kongxin.gitbook.io/empirecms/