deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-4842
Published: 2018-06-14
Description: A vulnerability has been identified in SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). A remote, authenticated attacker with access to the configuration web server could be able to store script code on the web site, if the HRP redundancy option is set. This code could be executed in the web browser of victims visiting this web site (XSS), affecting its confidentiality, integrity and availability. User interaction is required for successful exploitation, as the user needs to visit the manipulated web site. At the stage of publishing this security advisory no public exploitation is known. The vendor has confirmed the vulnerability and provides mitigations to resolve it.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-480829.pdf; https://www.securityfocus.com/bid/104494; https://cert-portal.siemens.com/productcert/pdf/ssa-480829.pdf
CVE: CVE-2018-4848
Published: 2018-06-14
Description: A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known. The vendor has confirmed the vulnerability and provides mitigations to resolve it.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: http://www.securityfocus.com/bid/104494; https://cert-portal.siemens.com/productcert/pdf/ssa-480829.pdf; http://www.securityfocus.com/bid/104494
CVE: CVE-2018-12114
Published: 2018-06-14
Description: Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.iwantacve.cn/index.php/archives/42/; https://www.cnblogs.com/v1vvwv/p/9168309.html; https://www.exploit-db.com/exploits/44887/
CVE: CVE-2018-12421
Published: 2018-06-14
Description: LTB (aka LDAP Tool Box) Self Service Password before 1.3 allows a change to a user password (without knowing the old password) via a crafted POST request, because the ldap_bind return value is mishandled and the PHP data type is not constrained to be a string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://github.com/ltb-project/self-service-password/issues/209; https://github.com/ltb-project/self-service-password/issues/211; https://lists.ltb-project.org/pipermail/ltb-announce/2018-June/000023.html
CVE: CVE-2017-12070
Published: 2018-06-14
Description: Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-12070.pdf; https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-12070.pdf
CVE: CVE-2018-11574
Published: 2018-06-14
Description: Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and eap-tls.c files. Configurations that use the `refuse-app` option are unaffected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-190, CWE-190
References: http://www.openwall.com/lists/oss-security/2018/06/11/1; https://usn.ubuntu.com/3810-1/; http://www.openwall.com/lists/oss-security/2018/06/11/1
CVE: CVE-2018-11689
Published: 2018-06-14
Description: Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 parameter. (The same Web Viewer codebase was transitioned from Samsung to Hanwha.)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/542083/100/0/threaded; https://drive.google.com/file/d/1aWbvdrx1KRkUv4ikkm530a2N5qrxCLmr/view?usp=sharing; https://seclists.org/bugtraq/2018/Jun/40
CVE: CVE-2018-11690
Published: 2018-06-14
Description: The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/148127/Joomla-2.4.0-Gridbox-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Jun/26; http://www.securityfocus.com/archive/1/542066/100/0/threaded
CVE: CVE-2018-8819
Published: 2018-06-14
Description: An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated attacker could enter malicious input to WebCTRL and a weakly configured XML parser will allow the application to disclose full file contents from the underlying web server OS via the "X-Wap-Profile" HTTP header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: http://packetstormsecurity.com/files/148126/WebCTRL-Out-Of-Band-XML-Injection.html; http://seclists.org/fulldisclosure/2018/Jun/21; https://hateshape.github.io/general/2018/06/07/CVE-2018-8819.html
CVE: CVE-2018-12420
Published: 2018-06-14
Description: IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://github.com/gamonoid/icehrm/commit/025a8283ab5d679ff99a6b82398e4c8efed1ad9d; https://github.com/gamonoid/icehrm/releases/tag/v23.0.1.OS; https://github.com/gamonoid/icehrm/commit/025a8283ab5d679ff99a6b82398e4c8efed1ad9d
CVE: CVE-2018-12423
Published: 2018-06-14
Description: In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.
CVSS Score: 7.5 (HIGH)
References: https://bugs.debian.org/901549; https://github.com/matrix-org/matrix-doc/issues/1304; https://matrix.org/blog/2018/06/14/security-update-synapse-0-31-2/
CVE: CVE-2018-6516
Published: 2018-06-14
Description: On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation.
CVSS Score: 7.8 (HIGH)
References: https://puppet.com/security/cve/CVE-2018-6516; https://puppet.com/security/cve/CVE-2018-6516
CVE: CVE-2018-12431
Published: 2018-06-14
Description: SeaCMS V6.61 has XSS via the site name parameter on an adm1n/admin_config.php page (aka a system management page).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/MichaelWayneLIU/seacms/blob/master/seacms.md; https://github.com/MichaelWayneLIU/seacms/blob/master/seacms.md
CVE: CVE-2018-12432
Published: 2018-06-14
Description: JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Hurdano/JavaMelody-XSS/wiki/Attack-Vector---JavaMelody; https://github.com/Hurdano/JavaMelody-XSS/wiki/Attack-Vector---JavaMelody
CVE: CVE-2018-12356
Published: 2018-06-15
Description: An issue was discovered in password-store.sh in pass in Simple Password Store 1.7.x before 1.7.2. The signature verification routine parses the output of GnuPG with an incomplete regular expression, which allows remote attackers to spoof file signatures on configuration files and extension scripts. Modifying the configuration file allows the attacker to inject additional encryption keys under their control, thereby disclosing passwords to the attacker. Modifying the extension scripts allows the attacker arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: http://openwall.com/lists/oss-security/2018/06/14/3; http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html; http://seclists.org/fulldisclosure/2019/Apr/38
CVE: CVE-2018-12433
Published: 2018-06-15
Description: cryptlib through 3.4.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. NOTE: the vendor does not include side-channel attacks within its threat model
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200, CWE-320
References: https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/; https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
CVE: CVE-2018-12434
Published: 2018-06-15
Description: LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.6.5-relnotes.txt; https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.7.4-relnotes.txt; https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
CVE: CVE-2018-12435
Published: 2018-06-15
Description: Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://botan.randombit.net/security.html; https://github.com/randombit/botan/commit/48fc8df51d99f9d8ba251219367b3d629cc848e3; https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
CVE: CVE-2018-12436
Published: 2018-06-15
Description: wolfcrypt/src/ecc.c in wolfSSL before 3.15.1.patch allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://github.com/wolfSSL/wolfssl/commit/9b9568d500f31f964af26ba8d01e542e1f27e5ca; https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/; https://www.wolfssl.com/wolfssh-and-rohnp/
CVE: CVE-2018-12437
Published: 2018-06-15
Description: LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: https://security.gentoo.org/glsa/202007-53; https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/; https://security.gentoo.org/glsa/202007-53
CVE: CVE-2018-12438
Published: 2018-06-15
Description: The Elliptic Curve Cryptography library (aka sunec or libsunec) allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200, CWE-320
References: https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/; https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
CVE: CVE-2018-12439
Published: 2018-06-15
Description: MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/; https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
CVE: CVE-2018-12440
Published: 2018-06-15
Description: BoringSSL through 2018-06-14 allows a memory-cache side-channel attack on DSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a DSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/; https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
CVE: CVE-2018-1085
Published: 2018-06-15
Description: openshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes the SSL client certificate authentication to be disabled. Quotations around the values of ETCD_CLIENT_CERT_AUTH and ETCD_PEER_CLIENT_CERT_AUTH in etcd.conf result in etcd being configured to allow remote users to connect without any authentication if they can access the etcd server bound to the network on the master nodes. An attacker could use this flaw to read and modify all the data about the Openshift cluster in the etcd datastore, potentially adding another compute node, or bringing down the entire cluster.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-592, CWE-287
References: https://access.redhat.com/errata/RHSA-2018:2013; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1085; https://access.redhat.com/errata/RHSA-2018:2013
CVE: CVE-2018-12447
Published: 2018-06-15
Description: The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leads to a heap-based buffer overflow and remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://drive.google.com/open?id=1J3hTt8XHz7u7QDSNYxEuwFZTO6Baggl0; https://github.com/ebel34/bpg-web-encoder/issues/2; https://drive.google.com/open?id=1J3hTt8XHz7u7QDSNYxEuwFZTO6Baggl0
CVE: CVE-2018-12457
Published: 2018-06-15
Description: expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://github.com/mrvautin/expressCart/commit/baccaae9b0b72f00b10c5453ca00231340ad3e3b; https://hackerone.com/reports/343626; https://www.npmjs.com/package/express-cart?activeTab=versions
CVE: CVE-2018-1419
Published: 2018-06-15
Description: IBM WebSphere MQ 8.0 and 9.0, when configured to use a PAM module for authentication, could allow a user to cause a deadlock in the IBM MQ PAM code which could result in a denial of service. IBM X-Force ID: 138949.
CVSS Score: 3.7 (LOW)
References: http://www.ibm.com/support/docview.wss?uid=swg22014650; http://www.securityfocus.com/bid/104488; https://exchange.xforce.ibmcloud.com/vulnerabilities/138949
CVE: CVE-2018-1460
Published: 2018-06-15
Description: IBM Netezza Platform Software (IBM PureData System for Analytics 1.0.0) could allow a local user to modify a world writable file, which could be used to execute commands as root. IBM X-Force ID: 140211.
CVSS Score: 8.4 (HIGH)
CWE: CWE-269
References: http://www.ibm.com/support/docview.wss?uid=swg22015701; http://www.securityfocus.com/bid/104486; https://exchange.xforce.ibmcloud.com/vulnerabilities/140211
CVE: CVE-2018-6671
Published: 2018-06-15
Description: Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HTTP request.
CVSS Score: 4.7 (MEDIUM)
References: http://www.securityfocus.com/bid/104485; http://www.securitytracker.com/id/1041155; https://kc.mcafee.com/corporate/index?page=content&id=SB10240
CVE: CVE-2018-6672
Published: 2018-06-15
Description: Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104485; http://www.securitytracker.com/id/1041155; https://kc.mcafee.com/corporate/index?page=content&id=SB10240
CVE: CVE-2018-12458
Published: 2018-06-15
Description: An improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/FFmpeg/FFmpeg/commit/6bbef938839adc55e8e048bc9cc2e0fafe2064df; https://github.com/FFmpeg/FFmpeg/commit/e1182fac1afba92a[PII_REDACTED]a5f644bee7e6e8; https://www.debian.org/security/2018/dsa-4249
CVE: CVE-2018-12459
Published: 2018-06-15
Description: An inconsistent bits-per-sample value in the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/FFmpeg/FFmpeg/commit/2fc108f60f98cd00813418a8754a46476b404a3c; https://github.com/FFmpeg/FFmpeg/commit/2fc108f60f98cd00813418a8754a46476b404a3c
CVE: CVE-2018-12460
Published: 2018-06-15
Description: libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, leading to a denial of service, related to idctdsp.c and mpegvideo.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/FFmpeg/FFmpeg/commit/b3332a182f8ba33a34542e4a0370f38b914ccf7d; https://github.com/FFmpeg/FFmpeg/commit/b3332a182f8ba33a34542e4a0370f38b914ccf7d
CVE: CVE-2018-5854
Published: 2018-06-15
Description: A stack-based buffer overflow can occur in fastboot from all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin
CVE: CVE-2018-5857
Published: 2018-06-15
Description: In the WCD CPE codec, a Use After Free condition can occur in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2018/06/04/june-2018-code-aurora-security-bulletin
CVE: CVE-2018-12030
Published: 2018-06-15
Description: Chevereto Free before 1.0.13 has XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://edricteo.com/chevereto-free-xss-vulnerability-in-version-1.0.12/; https://github.com/Chevereto/Chevereto-Free/commit/159daeab6adfe828bd06e6e74f5b647bf9b1bb70; https://edricteo.com/chevereto-free-xss-vulnerability-in-version-1.0.12/
CVE: CVE-2018-12034
Published: 2018-06-15
Description: In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yr_execute_code in libyara/exec.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://bnbdr.github.io/posts/swisscheese/; https://github.com/VirusTotal/yara/issues/891; https://github.com/bnbdr/swisscheese
CVE: CVE-2018-12035
Published: 2018-06-15
Description: In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds write vulnerability in yr_execute_code in libyara/exec.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://bnbdr.github.io/posts/swisscheese/; https://github.com/VirusTotal/yara/issues/891; https://github.com/bnbdr/swisscheese
CVE: CVE-2018-12422
Published: 2018-06-15
Description: addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that is processed by the strcat function. NOTE: the software maintainer disputes this because "the code had computed the required string length first, and then allocated a large-enough buffer on the heap.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://bugzilla.gnome.org/show_bug.cgi?id=796174; https://gitlab.gnome.org/GNOME/evolution-data-server/commit/34bad6173; https://bugzilla.gnome.org/show_bug.cgi?id=796174
CVE: CVE-2018-12481
Published: 2018-06-15
Description: The Olive Tree Ftp Server application 1.32 for Android has a "Sensitive Data on the Clipboard" vulnerability, as demonstrated by reading the "User password" field with the Drozer post.capture.clipboard module.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://pastebin.com/sp5nMhvc; https://pastebin.com/sp5nMhvc
CVE: CVE-2018-12491
Published: 2018-06-15
Description: PHPOK 4.9.032 has an arbitrary file upload vulnerability in the import_f function in framework/admin/modulec_control.php, as demonstrated by uploading a .php file within a .php.zip archive, a similar issue to CVE-2018-8944.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/SukaraLin/php_code_audit_project/blob/master/phpok/Phpok%204.9.032%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md; https://github.com/SukaraLin/php_code_audit_project/blob/master/phpok/Phpok%204.9.032%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md
CVE: CVE-2018-12492
Published: 2018-06-15
Description: PHPOK 4.9.032 has an arbitrary file deletion vulnerability in the delfile_f function in framework/admin/tpl_control.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/SukaraLin/php_code_audit_project/blob/master/phpok/Phpok%204.9.032%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md; https://github.com/SukaraLin/php_code_audit_project/blob/master/phpok/Phpok%204.9.032%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md
CVE: CVE-2018-12493
Published: 2018-06-15
Description: An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsWebFile/list.html?path=../ URI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/sanluan/PublicCMS/issues/12; https://github.com/sanluan/PublicCMS/issues/12
CVE: CVE-2018-12494
Published: 2018-06-15
Description: An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/sanluan/PublicCMS/issues/12; https://github.com/sanluan/PublicCMS/issues/12