rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-17704 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the textColor property of RadioButton objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7254.
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: Foxit
product: Reader
Published: 2019-01-24T04:00:00.000Z
CVE-2018-17705 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the display property of CheckBox objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7255.
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: Foxit
product: Reader
Published: 2019-01-24T04:00:00.000Z
CVE-2018-17706 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within fxhtml2pdf. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6230.
Problem types: cwe_id: CWE-787
description: CWE-787-Out-of-bounds Write
Affected products: vendor: Foxit
product: Foxit PhantomPDF
Published: 2018-10-29T22:00:00.000Z
CVE-2018-17707 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Epic Games Launcher versions prior to 8.2.2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handler for the com.epicgames.launcher protocol. A crafted URI with the com.epicgames.launcher protocol can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-7241.
Problem types: cwe_id: CWE-78
description: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Epic Games
product: Epic Games Launcher
Published: 2019-01-24T04:00:00.000Z
CVE-2018-17765 
Ingenico Telium 2 POS terminals have undeclared TRACE protocol commands. This is fixed in Telium 2 SDK v9.32.03 patch N.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T18:55:16.000Z
CVE-2018-17766 
Ingenico Telium 2 POS Telium2 OS allow bypass of file-reading restrictions via the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T18:55:20.000Z
CVE-2018-17767 
Ingenico Telium 2 POS terminals have hardcoded PPP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T18:55:24.000Z
CVE-2018-17768 
Ingenico Telium 2 POS terminals have an insecure TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T18:55:28.000Z
CVE-2018-17769 
Ingenico Telium 2 POS terminals have a buffer overflow via the 0x26 command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T18:55:33.000Z
CVE-2018-17770 
Ingenico Telium 2 POS terminals have a buffer overflow via the RemotePutFile command of the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T18:55:37.000Z
CVE-2018-17771 
Ingenico Telium 2 POS terminals have hardcoded FTP credentials. This is fixed in Telium 2 SDK v9.32.03 patch N.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T18:55:41.000Z
CVE-2018-17772 
Ingenico Telium 2 POS terminals allow arbitrary code execution via the TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T18:55:45.000Z
CVE-2018-17773 
Ingenico Telium 2 POS terminals have a buffer overflow via SOCKET_TASK in the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T18:55:49.000Z
CVE-2018-17774 
Ingenico Telium 2 POS terminals have an insecure NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T18:55:53.000Z
CVE-2018-17775 
Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local users to gain privileges by replacing an executable file with a Trojan horse.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-08T17:00:00.000Z
CVE-2018-17776 
PCProtect Anti-Virus v4.8.35 has "Everyone: (F)" permission for %PROGRAMFILES(X86)%\PCProtect, which allows local users to gain privileges by replacing an executable file with a Trojan horse.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-28T21:00:00.000Z
CVE-2018-17777 
An issue was discovered on D-Link DVA-5592 A1_WI_20180823 devices. If the PIN of the page "/ui/cbpc/login" is the default Parental Control PIN (0000), it is possible to bypass the login form by editing the path of the cookie "sid" generated by the page. The attacker will have access to the router control panel with administrator privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-18T22:00:00.000Z
CVE-2018-17780 
Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-29T19:00:00.000Z
CVE-2018-17781 
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-29T17:00:00.000Z
CVE-2018-17782 
A cross-site scripting (XSS) vulnerability in the Manage Filters page (manage_filter_page.php) in MantisBT 2.1.0 through 2.17.1 allows remote attackers (if access rights permit it) to inject arbitrary code (if CSP settings permit it) through a crafted project name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T18:00:00.000Z
CVE-2018-17783 
A cross-site scripting (XSS) vulnerability in the Edit Filter page (manage_filter_edit page.php) in MantisBT 2.1.0 through 2.17.1 allows remote attackers (if access rights permit it) to inject arbitrary code (if CSP settings permit it) through a crafted project name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T18:00:00.000Z
CVE-2018-17784 
Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-10T21:00:00.000Z
CVE-2018-17785 
In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-30T15:00:00.000Z
CVE-2018-17786 
On D-Link DIR-823G devices, ExportSettings.sh, upload_settings.cgi, GetDownLoadSyslog.sh, and upload_firmware.cgi do not require authentication, which allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-02T18:00:00.000Z
CVE-2018-17787 
On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because this data is sent directly to the "system" library function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-02T18:00:00.000Z
CVE-2018-17789 
Prospecta Master Data Online (MDO) allows CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T18:08:17.000Z
CVE-2018-17790 
Prospecta Master Data Online (MDO) 2.0 has Stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-15T16:25:36.000Z
CVE-2018-17791 
Newgen OmniFlow Intelligent Business Process Suite (iBPS) 7.0 has an "improper server side validation" vulnerability where client-side validations are tampered, and inappropriate information is stored on the server side and fetched from the server every time the user visits the D, creating business confusion. In the worst case, all available resources are consumed while processing the data, resulting in unavailability of the service to legitimate users. This occurs because non-editable parameters can be modified by manually editing a disabled form field within the developer options.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T19:24:17.000Z
CVE-2018-17792 
MDaemon Webmail (formerly WorldClient) has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-19T16:47:01.000Z
CVE-2018-17794 
An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in work_stuff_copy_to_from when called from iterate_demangle_function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-30T20:00:00.000Z
CVE-2018-17795 
The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, a similar issue to CVE-2017-9935.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-30T20:00:00.000Z
CVE-2018-17796 
An issue was discovered in MRCMS (aka mushroom) through 3.1.2. The WebParam.java file directly accepts the FIELD_T parameter in a request and uses it as a hash of SQL statements without filtering, resulting in a SQL injection vulnerability in getChannel() in the ChannelService.java file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-30T20:00:00.000Z
CVE-2018-17797 
An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-30T20:00:00.000Z
CVE-2018-17798 
An issue was discovered in zzcms 8.3. user/ztconfig.php allows remote attackers to delete arbitrary files via an absolute pathname in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-30T20:00:00.000Z
CVE-2018-17825 
An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TL_TABLE, SIN_TABLE, AMS_TABLE, and VIB_TABLE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17826 
HisiPHP 1.0.8 allows CSRF via admin.php/admin/user/adduser.html to add an administrator account. The attacker can then use that account to execute arbitrary PHP code by leveraging app/common/model/AdminAnnex.php to add .php to the default list of allowable file-upload types (.jpg, .png, .gif, .jpeg, and .ico).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17827 
HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into app/admin/model/AdminPlugins.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17828 
Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17830 
The $args variable in addons/mediapool/pages/index.php in REDAXO 5.6.2 is not effectively filtered, because names are not restricted (only values are restricted). The attacker can insert XSS payloads via an index.php?page=mediapool/media&opener_input_field=&args[ substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17831 
In REDAXO before 5.6.3, a critical SQL injection vulnerability has been discovered in the rex_list class because of the prepareQuery function in core/lib/list.php, via the index.php?page=users/users sort parameter. Endangered was the backend and the frontend only if rex_list were used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17832 
XSS exists in WUZHI CMS 2.0 via the index.php v or f parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17835 
An issue was discovered in GetSimple CMS 3.3.15. An administrator can insert stored XSS via the admin/settings.php Custom Permalink Structure parameter, which injects the XSS payload into any page created at the admin/pages.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17836 
An issue was discovered in JTBC(PHP) 3.0.1.6. It allows remote attackers to execute arbitrary PHP code by using a /console/file/manage.php?type=action&action=addfile&path=..%2F substring to upload, in conjunction with a multipart/form-data PHP payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17837 
An issue was discovered in JTBC(PHP) 3.0.1.6. Arbitrary file deletion is possible via a /console/file/manage.php?type=action&action=delete&path=c%3A%2F substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17838 
An issue was discovered in JTBC(PHP) 3.0.1.6. Arbitrary file read operations are possible via a /console/#/console/file/manage.php?type=list&path=c:/ substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17840 
SQL injection exists in Scriptzee Education Website 1.0 via the college_list.html subject, city, or country parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T16:34:27.000Z
CVE-2018-17841 
SQL injection exists in Scriptzee Flippa Marketplace Clone 1.0 via the site-search sortBy or sortDir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T16:12:57.000Z
CVE-2018-17842 
SQL injection exists in Scriptzee Hotel Booking Engine 1.0 via the hotels h_room_type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T16:05:02.000Z
CVE-2018-17843 
SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.0, Repurchase MLM Software 1.0, and Gift MLM Software 1.0 via the member/readmsg.php msg_id parameter, the member/tree.php pid parameter, or the member/downline.php m_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T17:11:03.000Z
CVE-2018-17846 
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17847 
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <svg><template><desc><t><svg></template>, leading to a "panic: runtime error" (index out of range) in (*nodeStack).pop in node.go, called from (*parser).clearActiveFormattingElements, during an html.Parse call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17848 
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <math><template><mn><b></template>, leading to a "panic: runtime error" (index out of range) in (*insertionModeStack).pop in node.go, called from inHeadIM, during an html.Parse call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17849 
Navigate CMS 2.8 has Stored XSS via a navigate_upload.php (aka File Upload) request with a multipart/form-data JavaScript payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-04T20:00:00.000Z
CVE-2018-17852 
A SQL injection was discovered in WUZHI CMS 4.1.0 in coreframe/app/coupon/admin/card.php via the groupname parameter to the /index.php?m=coupon&f=card&v=detail_listing URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17854 
SIMDComp before 0.1.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) because it can read (and then discard) extra bytes. NOTE: this issue exists because of an incomplete fix for CVE-2018-17427.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T08:00:00.000Z
CVE-2018-17855 
An issue was discovered in Joomla! before 3.8.13. If an attacker gets access to the mail account of an user who can approve admin verifications in the registration process, he can activate himself.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T21:00:00.000Z
CVE-2018-17856 
An issue was discovered in Joomla! before 3.8.13. com_joomlaupdate allows the execution of arbitrary code. The default ACL config enabled the ability of Administrator-level users to access com_joomlaupdate and trigger code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T21:00:00.000Z
CVE-2018-17857 
An issue was discovered in Joomla! before 3.8.13. Inadequate checks on the tags search fields can lead to an access level violation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T21:00:00.000Z
CVE-2018-17858 
An issue was discovered in Joomla! before 3.8.13. com_installer actions do not have sufficient CSRF hardening in the backend.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T21:00:00.000Z
CVE-2018-17859 
An issue was discovered in Joomla! before 3.8.13. Inadequate checks in com_contact could allow mail submission in disabled forms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T21:00:00.000Z
CVE-2018-17860 
Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T14:11:35.000Z
CVE-2018-17861 
A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Portal/EPP allows remote attackers to inject arbitrary web script via the wsdlLib parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-09T18:30:35.000Z
CVE-2018-17862 
A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Fiori allows remote attackers to inject arbitrary web script via the sys_jdbc parameter to /TestJDBC_Web/test2. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-09T18:30:30.000Z
CVE-2018-17865 
A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7.01 allows remote attackers to inject arbitrary web script via the wsdlPath parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-09T18:30:33.000Z
CVE-2018-17866 
Multiple cross-site scripting (XSS) vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile & Membership" plugin before 2.0.28 for WordPress allow remote attackers to inject arbitrary web script or HTML via the "Primary button Text" or "Second button text" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-09T22:00:00.000Z
CVE-2018-17867 
The Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute arbitrary code via shell metacharacters in the cgi-bin/adv_nat_virsvr.asp Addr parameter (aka the Local IP Address field).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T23:00:00.000Z
CVE-2018-17868 
DASAN H660GW devices have Stored XSS in the Port Forwarding functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T23:00:00.000Z
CVE-2018-17869 
DASAN H660GW devices do not implement any CSRF protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T23:00:00.000Z
CVE-2018-17870 
An issue was discovered in BTITeam XBTIT 2.5.4. The "returnto" parameter of account_change.php is vulnerable to an open redirect, a different vulnerability than CVE-2018-15683.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-01T23:00:00.000Z