CVE-2018-19182

Engelsystem before commit hash 2e28336 is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. The issue allows a remote attacker to induce unauthorized operations by persuading a user to submit a crafted request (the CVSS3 vector shows NETWORK, UI: REQUIRED, with HIGH impact on confide...

Kobe Beauty php-contact-form cross-site scripting vulnerability

Kobe Beauty php-contact-form is a software package from Kobe Beauty Japan that provides an auto-responder e-mail function. A cross-site scripting vulnerability exists in previous versions of Kobe Beauty php-contact-form commit e7d094ca8ab15215c32d6fa04d17e8519c8d21cf. An attacker can exploit this...