CVE-2019-11452

whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...

CVE-2017-15203

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user...

CVE-2019-11452

whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...

CVE-2019-11452

whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...

CVE-2017-15203

CVE-2017-15203 affects Kanboard prior to 1.0.47. An authenticated user can tamper with form data to remove categories from another user’s private project, indicating an access-control/intentional data modification flaw in the project categorization logic. The root cause is not expanded in the pro...

wordpress -- multiple vulnerabilities

Adam Silverstein reports: WordPress 4.5.3 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.5.2 and earlier are affected by several security issues: redirect bypass in the customizer, reporte...