deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-12695
Published: 2018-06-23
Description: mao10cms 6 allows XSS via the m=bbs&a=index page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/chenrui1896/mao10cms_xss/wiki/The-xss-vulnerability-of-mao10cms; https://github.com/nsmaomao/mao10cms/issues/2; https://github.com/chenrui1896/mao10cms_xss/wiki/The-xss-vulnerability-of-mao10cms
CVE: CVE-2018-12696
Published: 2018-06-23
Description: mao10cms 6 allows XSS via the article page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/chenrui1896/mao10cms_xss/wiki/The-xss-vulnerability-of-mao10cms; https://github.com/nsmaomao/mao10cms/issues/3; https://github.com/chenrui1896/mao10cms_xss/wiki/The-xss-vulnerability-of-mao10cms
CVE: CVE-2018-11560
Published: 2018-06-23
Description: The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key, as demonstrated by a long remoteIp parameter to cgi-bin/CGIProxy.fcgi on port 34100.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/badnack/Insteon_2864-222; https://github.com/badnack/Insteon_2864-222
CVE: CVE-2018-12640
Published: 2018-06-23
Description: The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or usr key in a GET request on port 34100.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/badnack/Insteon_2864-222; https://github.com/badnack/Insteon_2864-222
CVE: CVE-2018-12697
Published: 2018-06-23
Description: A NULL pointer dereference (aka SEGV on unknown address 0x[PII_REDACTED]00) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/104538; https://access.redhat.com/errata/RHSA-2019:2075; https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763102
CVE: CVE-2018-12698
Published: 2018-06-23
Description: demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/104539; https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763102; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454
CVE: CVE-2018-12699
Published: 2018-06-23
Description: finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104540; https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763102; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454
CVE: CVE-2018-12700
Published: 2018-06-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-12713
Published: 2018-06-24
Description: GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was intended to be private.
CVSS Score: 9.1 (CRITICAL)
References: https://github.com/GNOME/gimp/commit/c21eff4b031acb04fb4dfce8bd5fdfecc2b6524f; https://gitlab.gnome.org/GNOME/gimp/issues/1689; https://github.com/GNOME/gimp/commit/c21eff4b031acb04fb4dfce8bd5fdfecc2b6524f
CVE: CVE-2018-12705
Published: 2018-06-24
Description: DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://hackings8n.blogspot.com/2018/06/cve-2018-12705-digisol-wireless-router.html; https://www.exploit-db.com/exploits/44935/; https://hackings8n.blogspot.com/2018/06/cve-2018-12705-digisol-wireless-router.html
CVE: CVE-2018-12706
Published: 2018-06-24
Description: DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://hackings8n.blogspot.com/2018/06/cve-2018-12706-digisol-dg-br4000ng.html; https://www.exploit-db.com/exploits/44934/; https://hackings8n.blogspot.com/2018/06/cve-2018-12706-digisol-dg-br4000ng.html
CVE: CVE-2018-12714
Published: 2018-06-24
Description: An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/trace_events_filter.c could be called with no filter, which is an N=0 case when it expected at least one line to have been read, thus making the N-1 index invalid. This allows attackers to cause a denial of service (slab out-of-bounds write) or possibly have unspecified other impact via crafted perf_event_open and mmap system calls.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=81f9c4e4177d31ced6f52a89bb70e93bfb77ca03; http://www.securityfocus.com/bid/104544; https://bugzilla.kernel.org/show_bug.cgi?id=200019
CVE: CVE-2018-12716
Published: 2018-06-25
Description: The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scan_results JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its local network, extracting the scan_results bssid fields, and sending these fields in a geolocation/v1/geolocate Google Maps Geolocation API request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://krebsonsecurity.com/2018/06/google-to-fix-location-data-leak-in-google-home-chromecast/; https://medium.com/%40brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325; https://www.tripwire.com/state-of-security/vert/googles-newest-feature-find-my-home/
CVE: CVE-2018-10848
Published: 2018-06-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-12532. Reason: This candidate is a reservation duplicate of CVE-2018-12532. Notes: All CVE users should reference CVE-2018-12532 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-10849
Published: 2018-06-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-12533. Reason: This candidate is a reservation duplicate of CVE-2018-12533. Notes: All CVE users should reference CVE-2018-12533 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-12702
Published: 2018-06-25
Description: The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the "evilReflex" issue. NOTE: a PeckShield disclosure states "some researchers have independently discussed the mechanism of such vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://huobiglobal.zendesk.com/hc/en-us/articles/[PII_REDACTED]21-HADAX-Suspends-18T-and-GVE-Deposits-and-Withdrawals; https://peckshield.com/2018/06/23/evilReflex/; https://huobiglobal.zendesk.com/hc/en-us/articles/[PII_REDACTED]21-HADAX-Suspends-18T-and-GVE-Deposits-and-Withdrawals
CVE: CVE-2018-12703
Published: 2018-06-25
Description: The approveAndCallcode function of a smart contract implementation for Block 18 (18T), an tradable Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the "evilReflex" issue. NOTE: a PeckShield disclosure states "some researchers have independently discussed the mechanism of such vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://huobiglobal.zendesk.com/hc/en-us/articles/[PII_REDACTED]21-HADAX-Suspends-18T-and-GVE-Deposits-and-Withdrawals; https://peckshield.com/2018/06/23/evilReflex/; https://huobiglobal.zendesk.com/hc/en-us/articles/[PII_REDACTED]21-HADAX-Suspends-18T-and-GVE-Deposits-and-Withdrawals
CVE: CVE-2018-11446
Published: 2018-06-25
Description: The buy function of a smart contract implementation for Gold Reward (GRX), an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the "tradeTrap" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://peckshield.com/2018/06/11/tradeTrap/; https://peckshield.com/2018/06/11/tradeTrap/
CVE: CVE-2018-12062
Published: 2018-06-25
Description: The sell function of a smart contract implementation for SwftCoin (SWFTC), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://peckshield.com/2018/06/11/tradeTrap/; https://peckshield.com/2018/06/11/tradeTrap/
CVE: CVE-2018-12063
Published: 2018-06-25
Description: The sell function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://peckshield.com/2018/06/11/tradeTrap/; https://peckshield.com/2018/06/11/tradeTrap/
CVE: CVE-2018-12067
Published: 2018-06-25
Description: The sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://peckshield.com/2018/06/11/tradeTrap/; https://peckshield.com/2018/06/11/tradeTrap/
CVE: CVE-2018-12068
Published: 2018-06-25
Description: The sell function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://peckshield.com/2018/06/11/tradeTrap/; https://peckshield.com/2018/06/11/tradeTrap/
CVE: CVE-2018-12070
Published: 2018-06-25
Description: The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://peckshield.com/2018/06/11/tradeTrap/; https://peckshield.com/2018/06/11/tradeTrap/
CVE: CVE-2018-12078
Published: 2018-06-25
Description: The mintToken function of a smart contract implementation for PolyAI (AI), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
CVSS Score: 7.5 (HIGH)
References: https://peckshield.com/2018/06/11/tradeTrap/; https://peckshield.com/2018/06/11/tradeTrap/
CVE: CVE-2018-12079
Published: 2018-06-25
Description: The mintToken function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
CVSS Score: 7.5 (HIGH)
References: https://peckshield.com/2018/06/11/tradeTrap/; https://peckshield.com/2018/06/11/tradeTrap/
CVE: CVE-2018-12080
Published: 2018-06-25
Description: The mintToken function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
CVSS Score: 7.5 (HIGH)
References: https://peckshield.com/2018/06/11/tradeTrap/; https://peckshield.com/2018/06/11/tradeTrap/
CVE: CVE-2018-12081
Published: 2018-06-25
Description: The mintToken function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
CVSS Score: 7.5 (HIGH)
References: https://peckshield.com/2018/06/11/tradeTrap/; https://peckshield.com/2018/06/11/tradeTrap/
CVE: CVE-2018-12082
Published: 2018-06-25
Description: The mintToken function of a smart contract implementation for Fujinto (NTO), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
CVSS Score: 7.5 (HIGH)
References: https://peckshield.com/2018/06/11/tradeTrap/; https://peckshield.com/2018/06/11/tradeTrap/
CVE: CVE-2018-12083
Published: 2018-06-25
Description: The mintToken function of a smart contract implementation for GOAL Bonanza (GOAL), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
CVSS Score: 7.5 (HIGH)
References: https://peckshield.com/2018/06/11/tradeTrap/; https://peckshield.com/2018/06/11/tradeTrap/
CVE: CVE-2018-12084
Published: 2018-06-25
Description: The mintToken function of a smart contract implementation for BitAsean (BAS), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.
CVSS Score: 7.5 (HIGH)
References: https://peckshield.com/2018/06/11/tradeTrap/; https://peckshield.com/2018/06/11/tradeTrap/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-10364.  Reason: This candidate is a reservation duplicate of CVE-2018-10364.  Notes: All CVE users should reference CVE-2018-10364 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-11522.  Reason: This candidate is a reservation duplicate of CVE-2018-11522.  Notes: All CVE users should reference CVE-2018-11522 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-10362.  Reason: This candidate is a reservation duplicate of CVE-2018-10362.  Notes: All CVE users should reference CVE-2018-10362 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-11416.  Reason: This candidate is a reservation duplicate of CVE-2018-11416.  Notes: All CVE users should reference CVE-2018-11416 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-10188.  Reason: This candidate is a reservation duplicate of CVE-2018-10188.  Notes: All CVE users should reference CVE-2018-10188 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-9312
Published: 2018-06-25
Description: Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS safety devices v30 and earlier causes a denial of service. When a crafted TCP packet is received, the device reboots immediately.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104528; https://ics-cert.us-cert.gov/advisories/ICSA-18-172-02; http://www.securityfocus.com/bid/104528
CVE: CVE-2018-10956
Published: 2018-06-25
Description: IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/148274/IPConfigure-Orchid-VMS-2.0.5-Directory-Traversal-Information-Disclosure.html; https://www.exploit-db.com/exploits/44916/; http://packetstormsecurity.com/files/148274/IPConfigure-Orchid-VMS-2.0.5-Directory-Traversal-Information-Disclosure.html
CVE: CVE-2018-11039
Published: 2018-06-25
Description: Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS vulnerability, a malicious user (or attacker) can use this filter to escalate to an XST (Cross Site Tracing) attack.
CVSS Score: 5.9 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/107984; https://lists.debian.org/debian-lts-announce/2021/04/msg00022.html
CVE: CVE-2018-11040
Published: 2018-06-25
Description: Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the "jsonp" and "callback" JSONP parameters, enabling cross-domain requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-829
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; https://lists.debian.org/debian-lts-announce/2021/04/msg00022.html; https://pivotal.io/security/cve-2018-11040
CVE: CVE-2018-11041
Published: 2018-06-25
Description: Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior to v60 except v55.1 and v52.9, does not validate redirect URL values on a form parameter used for internal UAA redirects on the login page, allowing open redirects. A remote attacker can craft a malicious link that, when clicked, will redirect users to arbitrary websites after a successful login attempt.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://www.cloudfoundry.org/blog/cve-2018-11041/; https://www.cloudfoundry.org/blog/cve-2018-11041/
CVE: CVE-2018-11046
Published: 2018-06-25
Description: Pivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX packages that lacks security vulnerability patches. An attacker with access to the NGINX processes and knowledge of how to exploit the unpatched vulnerabilities may be able to impact Operations Manager
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104545; https://pivotal.io/security/cve-2018-11046; http://www.securityfocus.com/bid/104545
CVE: CVE-2018-12602
Published: 2018-06-25
Description: A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/148268/LFCMS-3.7.0-Cross-Site-Request-Forgery.html; http://www.iwantacve.cn/index.php/archives/43/; https://www.cnblogs.com/v1vvwv/p/9203740.html
CVE: CVE-2018-8755
Published: 2018-06-25
Description: NuCom WR644GACV devices before STA006 allow an attacker to download the configuration file without credentials. By downloading this file, an attacker can access the admin password, WPA key, and any config information of the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://blog.nivel4.com/investigaciones/vulnerabilidad-en-los-dispositivos-nucom-wr644gacv/; https://blog.nivel4.com/investigaciones/vulnerabilidad-en-los-dispositivos-nucom-wr644gacv/
CVE: CVE-2018-12735
Published: 2018-06-25
Description: SAJ Solar Inverter allows remote attackers to obtain potentially sensitive information via a direct request for the inverter_info.htm or english_main.htm URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.seebug.org/vuldb/ssvid-97369; https://www.seebug.org/vuldb/ssvid-97369
CVE: CVE-2018-11587
Published: 2018-06-25
Description: There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.24.html; https://github.com/centreon/centreon/pull/6263; https://github.com/centreon/centreon/releases
CVE: CVE-2018-11588
Published: 2018-06-25
Description: Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command description, resulting in stored XSS. This is related to www/include/core/menu/menu.php and www/include/configuration/configObject/command/formArguments.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.24.html; https://github.com/centreon/centreon/pull/6259; https://github.com/centreon/centreon/pull/6260
CVE: CVE-2018-11589
Published: 2018-06-25
Description: Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.php, the id parameter in GetXmlHost.php, the chartId parameter in ExportCSVServiceData.php, the searchCurve parameter in listComponentTemplates.php, or the host_id parameter in makeXML_ListMetrics.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.24.html; https://github.com/centreon/centreon/pull/6250; https://github.com/centreon/centreon/pull/6251
CVE: CVE-2018-12603
Published: 2018-06-25
Description: Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authentication of unspecified users for requests that add administrator users via the s parameter, a related issue to CVE-2018-12114.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.iwantacve.cn/index.php/archives/44/; https://packetstormsecurity.com/files/148268/LFCMS-3.7.0-Cross-Site-Request-Forgery.html; https://www.cnblogs.com/v1vvwv/p/9203899.html