CVE-2018-1000647

The CVE-2018-1000647 entry concerns LibreHealthIO LH-EHR REL-2.0.0, where the Import template exposes an Authenticated Unrestricted File Deletion vulnerability that can cause Denial of Service. The vulnerability is exploitable via a user-controlled parameter, with CVSS metrics indicating Network ...

CVE-2018-1000647

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial of service. This attack appear to be exploitable via User controlled parameter...

CVE-2018-9846

In Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's possible to exploit the unsanitized, user-controlled "uid" parameter in an archive.php task=mail&mbox=INBOX&action=plugin.move2archive request to perform an MX IMAP injection attack by placing an IMAP...