PT-2018-18195

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 4.0.0 Release 4902 Description An issue exists where SQL injection vulnerabilities are present in several parameters. The affected parameters include the channelId parameter in the "actions/vote channel.php"...

CVE-2018-7666: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in ClipBucket before 4.0.0 Release 4902. SQL injection vulnerabilities exist in the actions/votechannel.php channelId parameter, the ajax/commonAjax.php email parameter, and the ajax/commonAjax.php username parameter...

CVE-2009-3249: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the module parameter to graph.php; or the 2 module or 3 file parameter to include/Ajax/CommonAjax.php, reachable through...