Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-5653 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:51.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php weblizar_pffree_settings_save_get-users parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9009 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/weblizar-pinterest-feeds.md
CVE ID: CVE-2018-5654 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:51.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php PFFREE_Access_Token parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9009 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/weblizar-pinterest-feeds.md
CVE ID: CVE-2018-5655 State: PUBLISHED Published: 2018-01-13T00:00:00Z Last Updated: 2024-09-16T17:38:53.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/weblizar-pinterest-feeds.md
CVE ID: CVE-2018-5656 State: PUBLISHED Published: 2018-01-13T00:00:00Z Last Updated: 2024-09-16T20:12:41.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. CSRF exists via wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/weblizar-pinterest-feeds.md
CVE ID: CVE-2018-5657 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:50.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php counter_title_icon parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9010 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE ID: CVE-2018-5658 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:50.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. CSRF exists via wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9010 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE ID: CVE-2018-5659 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:50.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soon_title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9010 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE ID: CVE-2018-5660 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:50.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soon_sub_title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9010 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE ID: CVE-2018-5661 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:50.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logo_width parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9010 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE ID: CVE-2018-5662 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:51.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php counter_title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9010 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE ID: CVE-2018-5663 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:50.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php button_text_link parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9010 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE ID: CVE-2018-5664 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:50.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php social_icon_1 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9010 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE ID: CVE-2018-5665 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:50.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logo_height parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9010 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE ID: CVE-2018-5666 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:50.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php bg_color parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9010 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE ID: CVE-2018-5667 State: PUBLISHED Published: 2018-01-13T00:00:00Z Last Updated: 2024-09-16T18:48:50.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnu_username_validation_pattern parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/read-and-understood.md
CVE ID: CVE-2018-5668 State: PUBLISHED Published: 2018-01-13T00:00:00Z Last Updated: 2024-09-16T16:23:43.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnu_username_validation_title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/read-and-understood.md
CVE ID: CVE-2018-5669 State: PUBLISHED Published: 2018-01-13T00:00:00Z Last Updated: 2024-09-16T23:31:10.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d4wner/Vulnerabilities-Report/blob/master/read-and-understood.md
CVE ID: CVE-2018-5670 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:51.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php sale_conditions[count][] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9012 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md
CVE ID: CVE-2018-5671 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:51.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php extra_field1[items][field_item1][price_percent] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9012 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md
CVE ID: CVE-2018-5672 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:50.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php form_field5[label] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9012 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md
CVE ID: CVE-2018-5673 State: PUBLISHED Published: 2018-01-13T00:00:00 Last Updated: 2024-08-05T05:40:51.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. CSRF exists via wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9012 - https://github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md
CVE ID: CVE-2018-5674 State: PUBLISHED Published: 2018-05-24T21:00:00 Last Updated: 2024-08-05T05:40:51.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of specially crafted pdf files with embedded u3d images. Crafted data in the PDF file can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code under th
ile can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of the current process, a different vulnerability than CVE-2018-5676 and CVE-2018-5678. Additional Analyst Notes: - CVE Program Container: References: - https://srcincite.io/advisories/src-2018-0010/ - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/104300
CVE ID: CVE-2018-5675 State: PUBLISHED Published: 2018-05-24T21:00:00 Last Updated: 2024-08-05T05:40:51.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of specially crafted pdf files with embedded u3d images. Crafted data in the PDF file can trigger an out-of-bounds write on a buffer. An attacker can leverage this vulnerability to execute code under th
ile can trigger an out-of-bounds write on a buffer. An attacker can leverage this vulnerability to execute code under the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/104300 - https://srcincite.io/advisories/src-2018-0013/
CVE ID: CVE-2018-5676 State: PUBLISHED Published: 2018-05-24T21:00:00 Last Updated: 2024-08-05T05:40:50.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of specially crafted pdf files with embedded u3d images. Crafted data in the PDF file can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code under th
ile can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of the current process, a different vulnerability than CVE-2018-5674 and CVE-2018-5678. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/104300 - https://srcincite.io/advisories/src-2018-0011/
CVE ID: CVE-2018-5677 State: PUBLISHED Published: 2018-05-24T21:00:00 Last Updated: 2024-08-05T05:40:51.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of specially crafted pdf files with embedded u3d images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An at
e lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process, a different vulnerability than CVE-2018-5679 and CVE-2018-5680. Additional Analyst Notes: - CVE Program Container: References: - https://srcincite.io/advisories/src-2018-0014/ - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/104300
CVE ID: CVE-2018-5678 State: PUBLISHED Published: 2018-05-24T21:00:00 Last Updated: 2024-08-05T05:40:50.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of specially crafted pdf files with embedded u3d images. Crafted data in the PDF file can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code under th
ile can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of the current process, a different vulnerability than CVE-2018-5674 and CVE-2018-5676. Additional Analyst Notes: - CVE Program Container: References: - https://srcincite.io/advisories/src-2018-0012/ - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/104300
CVE ID: CVE-2018-5679 State: PUBLISHED Published: 2018-05-24T21:00:00 Last Updated: 2024-08-05T05:40:51.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of specially crafted pdf files with embedded u3d images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An at
e lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process, a different vulnerability than CVE-2018-5677 and CVE-2018-5680. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://srcincite.io/advisories/src-2018-0015/ - http://www.securityfocus.com/bid/104300
CVE ID: CVE-2018-5680 State: PUBLISHED Published: 2018-05-24T21:00:00 Last Updated: 2024-08-05T05:40:51.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of specially crafted pdf files with embedded u3d images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An at
e lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process, a different vulnerability than CVE-2018-5677 and CVE-2018-5679. Additional Analyst Notes: - CVE Program Container: References: - https://srcincite.io/advisories/src-2018-0016/ - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securityfocus.com/bid/104300
CVE ID: CVE-2018-5681 State: PUBLISHED Published: 2018-01-13T05:00:00 Last Updated: 2024-08-05T05:40:51.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop 1.7.2.4 has XSS via source-code editing on the "Pages > Edit page" screen. Additional Analyst Notes: - CVE Program Container: References: - http://forge.prestashop.com/browse/BOOM-4612
CVE ID: CVE-2018-5682 State: PUBLISHED Published: 2018-01-13T05:00:00 Last Updated: 2024-08-05T05:40:51.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop 1.7.2.4 allows user enumeration via the Reset Password feature, by noticing which reset attempts do not produce a "This account does not exist" error message. Additional Analyst Notes: - CVE Program Container: References: - http://forge.prestashop.com/browse/BOOM-4613
CVE ID: CVE-2018-5683 State: PUBLISHED Published: 2018-01-23T18:00:00 Last Updated: 2024-08-05T05:40:51.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2162 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://www.debian.org/security/2018/dsa-4213 - https://access.redhat.com/errata/RHSA-2018:0816 - https://access.redhat.com/errata/RHSA-2018:1104 - htt
/2018/dsa-4213 - https://access.redhat.com/errata/RHSA-2018:0816 - https://access.redhat.com/errata/RHSA-2018:1104 - https://lists.gnu.org/archive/html/qemu-devel/2018-01/msg02597.html - https://usn.ubuntu.com/3575-1/ - http://www.securityfocus.com/bid/102518 - http://www.openwall.com/lists/oss-security/2018/01/15/2
CVE ID: CVE-2018-5684 State: PUBLISHED Published: 2018-01-14T02:00:00 Last Updated: 2024-08-05T05:40:51.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Libav through 12.2, there is an invalid memcpy call in the ff_mov_read_stsd_entries function of libavformat/mov.c. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) and program failure with a crafted avi file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1110
CVE ID: CVE-2018-5685 State: PUBLISHED Published: 2018-01-14T02:00:00 Last Updated: 2024-08-05T05:40:51.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function (coders/bmp.c). Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/graphicsmagick/bugs/541/ - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/52a91ddb1aa6 - https://lists.debian.org/debian-lts-announce/2018/01/msg00018.html - https://www.debian.org/sec
agick/rev/52a91ddb1aa6 - https://lists.debian.org/debian-lts-announce/2018/01/msg00018.html - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html
CVE ID: CVE-2018-5686 State: PUBLISHED Published: 2018-01-14T02:00:00 Last Updated: 2024-09-12T16:34:07.947184 Vendors: n/a Products: n/a Problem Types: n/a Description: In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdf_parse_array function (pdf/pdf-parse.c) because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=698860 - https://security.gentoo.org/glsa/201811-15 - https://www.debian.org/security/2018/dsa-4334 - https://lists.debian.org/debian-lts-announce/2019/06/ms
glsa/201811-15 - https://www.debian.org/security/2018/dsa-4334 - https://lists.debian.org/debian-lts-announce/2019/06/msg00027.html - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=b70eb93f6936c03d8af52040bbca4d4a7db39079
CVE ID: CVE-2018-5687 State: PUBLISHED Published: 2018-01-14T02:00:00 Last Updated: 2024-08-05T05:40:51.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: NewsBee allows XSS via the Company Name field in the Settings under admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/copy_cat/newbeecms_xss
CVE ID: CVE-2018-5688 State: PUBLISHED Published: 2018-01-14T20:00:00 Last Updated: 2024-08-05T05:40:51.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: ILIAS before 5.2.4 has XSS via the cmd parameter to the displayHeader function in setup/classes/class.ilSetupGUI.php in the Setup component. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43595/ - https://www.ilias.de/docu/goto_docu_pg_75029_35.html - https://github.com/ILIAS-eLearning/ILIAS/commit/c0f326d05231072e33679b84835c03d5043255cb
CVE ID: CVE-2018-5689 State: PUBLISHED Published: 2018-01-14T04:00:00 Last Updated: 2024-08-05T05:40:51.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email. Additional Analyst Notes: - CVE Program Container: References: - https://hg.dotclear.org/dotclear/rev/3b0b868d58b0 - http://dev.dotclear.org/2.0/changeset/3b0b868d58b00a1b216e0dc13c461bb3550ed3da