deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-3296
Published: 2018-10-17
Description: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
CVSS Score: 8.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/105619
CVE: CVE-2018-3297
Published: 2018-10-17
Description: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
CVSS Score: 8.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/105619
CVE: CVE-2018-3298
Published: 2018-10-17
Description: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
CVSS Score: 8.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/105619
CVE: CVE-2018-3299
Published: 2018-10-17
Description: Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Text. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Text, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Text as well as unauthorized update, insert or delete access to some of Oracle Text accessible data. CVSS 3.0 Base Score 8.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:H).
CVSS Score: 8.2 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/105648; http://www.securitytracker.com/id/1041890
CVE: CVE-2018-3301
Published: 2018-10-17
Description: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
CVSS Score: 6.1 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/105598; http://www.securitytracker.com/id/1041891
CVE: CVE-2018-3302
Published: 2018-10-17
Description: Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology and unauthorized read access to a subset of Oracle Outside In Technology accessible data. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.0 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H).
CVSS Score: 7.1 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/105603; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2018-17893
Published: 2018-10-17
Description: LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-822, CWE-476
References: http://laquisscada.com/instale1.php; http://www.securityfocus.com/bid/105719; https://ics-cert.us-cert.gov/advisories/ICSA-18-289-01
CVE: CVE-2018-17895
Published: 2018-10-17
Description: LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities, which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://laquisscada.com/instale1.php; http://www.securityfocus.com/bid/105719; https://ics-cert.us-cert.gov/advisories/ICSA-18-289-01
CVE: CVE-2018-17897
Published: 2018-10-17
Description: LAquis SCADA Versions 4.1.0.3870 and prior has several integer overflow to buffer overflow vulnerabilities, which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://laquisscada.com/instale1.php; http://www.securityfocus.com/bid/105719; https://ics-cert.us-cert.gov/advisories/ICSA-18-289-01
CVE: CVE-2018-17899
Published: 2018-10-17
Description: LAquis SCADA Versions 4.1.0.3870 and prior has a path traversal vulnerability, which may allow remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: http://laquisscada.com/instale1.php; http://www.securityfocus.com/bid/105719; https://ics-cert.us-cert.gov/advisories/ICSA-18-289-01
CVE: CVE-2018-17901
Published: 2018-10-17
Description: LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on a stack object, which may allow an attacker to execute code under the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://laquisscada.com/instale1.php; https://ics-cert.us-cert.gov/advisories/ICSA-18-289-01; https://exchange.xforce.ibmcloud.com/vulnerabilities/151421
CVE: CVE-2018-17911
Published: 2018-10-17
Description: LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: http://laquisscada.com/instale1.php; https://ics-cert.us-cert.gov/advisories/ICSA-18-289-01; https://www.zerodayinitiative.com/advisories/ZDI-18-1258/
CVE: CVE-2018-3953
Published: 2018-10-17
Description: Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are susceptible to OS command injection vulnerabilities due to improper filtering of data passed to and retrieved from NVRAM. Data entered into the 'Router Name' input field through the web portal is submitted to apply.cgi as the value to the 'machine_name' POST parameter. When the 'preinit' binary receives the SIGHUP signal, it enters a code path that continues until it reaches offset 0x0042B5C4 in the 'start_lltd' function. Within the 'start_lltd' function, a 'nvram_get' call is used to obtain the value of the user-controlled 'machine_name' NVRAM entry. This value is then entered directly into a command intended to write the host name to a file and subsequently executed.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0625; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0625
CVE: CVE-2018-3954
Published: 2018-10-17
Description: Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are susceptible to OS command injection vulnerabilities due to improper filtering of data passed to and retrieved from NVRAMData entered into the 'Router Name' input field through the web portal is submitted to apply.cgi as the value to the 'machine_name' POST parameter. When the 'preinit' binary receives the SIGHUP signal it enters a code path that calls a function named 'set_host_domain_name' from its libshared.so shared object.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0625; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0625
CVE: CVE-2018-3955
Published: 2018-10-17
Description: An exploitable operating system command injection exists in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04). Specially crafted entries to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send an authenticated HTTP request to trigger this vulnerability. Data entered into the 'Domain Name' input field through the web portal is submitted to apply.cgi as the value to the 'wan_domain' POST parameter. The wan_domain data goes through the nvram_set process described above. When the 'preinit' binary receives the SIGHUP signal it enters a code path that calls a function named 'set_host_domain_name' from its libshared.so shared object.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0625; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0625
CVE: CVE-2018-18407
Published: 2018-10-17
Description: A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The issue gets triggered in the function csum_replace4() in incremental_checksum.h, causing a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/SegfaultMasters/covering360/blob/master/tcpreplay/README.md#user-content-heap-overflow-in-csum_replace4; https://github.com/appneta/tcpreplay/issues/488; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4V3SADKXUSHWTVAPU3WLXBDEQUHRA6ZO/
CVE: CVE-2018-18408
Published: 2018-10-17
Description: A use-after-free was discovered in the tcpbridge binary of Tcpreplay 4.3.0 beta1. The issue gets triggered in the function post_args() at tcpbridge.c, causing a denial of service or possibly unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/SegfaultMasters/covering360/blob/master/tcpreplay/README.md#use-after-free-in-post_args; https://github.com/appneta/tcpreplay/issues/489; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4V3SADKXUSHWTVAPU3WLXBDEQUHRA6ZO/
CVE: CVE-2018-18409
Published: 2018-10-17
Description: A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an address_histogram call or a get_histogram call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/simsong/tcpflow/issues/195; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6MP4YMCJX4ITOBFX427UMOA6E7ZLJDE/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MN5FW6HKPDP7PI2IVNMFSQVIDSCQ5BOR/
CVE: CVE-2018-18422
Published: 2018-10-17
Description: UsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/a_adminx.php?x=a URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/yanchongchong/swallow/issues/8; https://github.com/yanchongchong/swallow/issues/8
CVE: CVE-2018-18426
Published: 2018-10-17
Description: s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow value in the robots.php txt parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://www.ttk7.cn/post-93.html; https://www.s-cms.cn/update.html; http://www.ttk7.cn/post-93.html
CVE: CVE-2018-18427
Published: 2018-10-17
Description: s-cms 3.0 allows SQL Injection via the member/post.php 0_id parameter or the POST data to member/member_login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.ttk7.cn/post-92.html; https://www.s-cms.cn/update.html; http://www.ttk7.cn/post-92.html
CVE: CVE-2018-18430
Published: 2018-10-17
Description: An issue was discovered in DESTOON B2B 7.0. admin\setting.inc.php has XSS via the first text box to the admin.php URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/DESTOON/blob/master/XSS.md#xss1; https://www.patec.cn/newsshow.php?cid=24&id=134; https://github.com/AvaterXXX/DESTOON/blob/master/XSS.md#xss1
CVE: CVE-2018-18431
Published: 2018-10-17
Description: An issue was discovered in DESTOON B2B 7.0. XSS exists via certain text boxes to the admin.php?moduleid=2&action=add URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/DESTOON/blob/master/XSS.md#xss2; https://www.patec.cn/newsshow.php?cid=24&id=134; https://github.com/AvaterXXX/DESTOON/blob/master/XSS.md#xss2
CVE: CVE-2018-18432
Published: 2018-10-17
Description: An issue was discovered in DESTOON B2B 7.0. CSRF exists via the admin.php URI in an action=add request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/AvaterXXX/DESTOON/blob/master/CSRF.md; https://www.patec.cn/newsshow.php?cid=24&id=134; https://github.com/AvaterXXX/DESTOON/blob/master/CSRF.md
CVE: CVE-2018-18433
Published: 2018-10-17
Description: An issue was discovered in DESTOON B2B 7.0. admin/category.inc.php has XSS via the category[catname] parameter to the admin.php URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/DESTOON/blob/master/XSS.md#xss3; https://www.patec.cn/newsshow.php?cid=24&id=134; https://github.com/AvaterXXX/DESTOON/blob/master/XSS.md#xss3
CVE: CVE-2018-18434
Published: 2018-10-17
Description: An issue was discovered in litemall 0.9.0. Arbitrary file download is possible via ../ directory traversal in linlinjava/litemall/wx/web/WxStorageController.java in the litemall-wx-api component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/linlinjava/litemall/commit/49ab94d0052672d4fb642505d44b94a18abea332; https://github.com/linlinjava/litemall/issues/76; https://github.com/linlinjava/litemall/commit/49ab94d0052672d4fb642505d44b94a18abea332
CVE: CVE-2018-18436
Published: 2018-10-17
Description: JTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/w3irdo001/demo/blob/master/1.html; https://github.com/w3irdo001/demo/blob/master/1.html
CVE: CVE-2018-10933
Published: 2018-10-17
Description: A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-592, CWE-287
References: http://www.securityfocus.com/bid/105677; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933; https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html
CVE: CVE-2018-7076
Published: 2018-10-17
Description: A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03901en_us; https://exchange.xforce.ibmcloud.com/vulnerabilities/151693; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03901en_us
CVE: CVE-2018-7110
Published: 2018-10-17
Description: A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework (SGF) version 4.2, 4.3. A race condition under high load in SGF exists where SGF transferred different parameter to the enabler.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03890en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03890en_us
CVE: CVE-2018-7111
Published: 2018-10-17
Description: A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/105704; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03891en_us; https://exchange.xforce.ibmcloud.com/vulnerabilities/151691
CVE: CVE-2018-10822
Published: 2018-10-17
Description: Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers to read arbitrary files via a /.. or // after "GET /uir" in an HTTP request.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-6190.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://sploit.tech/2018/10/12/D-Link.html; https://seclists.org/fulldisclosure/2018/Oct/36; http://sploit.tech/2018/10/12/D-Link.html
CVE: CVE-2018-10823
Published: 2018-10-17
Description: An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. An authenticated attacker may execute arbitrary code by injecting the shell command into the chkisg.htm page Sip parameter. This allows for full control over the device internals.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://sploit.tech/2018/10/12/D-Link.html; https://seclists.org/fulldisclosure/2018/Oct/36; http://sploit.tech/2018/10/12/D-Link.html
CVE: CVE-2018-10824
Published: 2018-10-17
Description: An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. The administrative password is stored in plaintext in the /tmp/csman/0 file. An attacker having a directory traversal (or LFI) can easily get full router access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-522
References: http://sploit.tech/2018/10/12/D-Link.html; https://seclists.org/fulldisclosure/2018/Oct/36; http://sploit.tech/2018/10/12/D-Link.html
CVE: CVE-2018-15493
Published: 2018-10-17
Description: vBulletin 5.4.3 has an Open Redirect.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-017.txt; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-017.txt
CVE: CVE-2018-16232
Published: 2018-10-17
Description: An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi. This allows an authenticated user with privileges for the affected page to execute arbitrary commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://doddsecurity.com/213/command-injection-on-ipfire-firewalls/; https://www.ipfire.org/news/ipfire-2-21-core-update-124-released; https://doddsecurity.com/213/command-injection-on-ipfire-firewalls/
CVE: CVE-2018-17964
Published: 2018-10-17
Description: Aryanic HighPortal 12.5 has XSS via an Add Tags action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/149823/HighPortal-12.5-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/149823/HighPortal-12.5-Cross-Site-Scripting.html
CVE: CVE-2018-18262
Published: 2018-10-17
Description: Zoho ManageEngine OpManager 12.3 before build 123214 has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Oct/34; http://seclists.org/fulldisclosure/2018/Oct/34
CVE: CVE-2018-18372
Published: 2018-10-17
Description: A Stored XSS vulnerability has been discovered in KAASoft Library CMS - Powerful Book Management System 2.1.1 via the /admin/book/create/ title parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149805/Library-CMS-2.1.1-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149805/Library-CMS-2.1.1-Cross-Site-Scripting.html
CVE: CVE-2018-18373
Published: 2018-10-17
Description: In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file upload areas in the Chat and Help Desk sections via the msg parameter in a /wp-admin/admin-ajax.php sb_ajax_add_message action.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149806/WordPress-Support-Board-1.2.3-Cross-Site-Scripting.html; https://wpvulndb.com/vulnerabilities/9707; http://packetstormsecurity.com/files/149806/WordPress-Support-Board-1.2.3-Cross-Site-Scripting.html