PT-2018-9782

Name of the Vulnerable Software and Affected Versions: baijiacms V3 Description: The issue allows for CSRF via the "index.php?mod=site&op=edituser&name=manager&do=user" API endpoint to add an administrator account. Recommendations: For baijiacms V3, as a temporary workaround, consider restricting...

CVE-2018-10219

CVE-2018-10219 affects baijiacms V3 and describes a physical path leakage exploitation via the request index.php?mod=mobile&name=member&do=index. Public sources (CNVD-2018-11709, NVD entry) attribute an information disclosure vulnerability to this path leakage, with the impact on confidentiality ...

CVE-2018-10132

PbootCMS v0.9.8 has CSRF via an admin.php/Message/mod/id/19.html?backurl=/index.php request, resulting in PHP code injection in the recontent parameter...

PT-2018-9700

Name of the Vulnerable Software and Affected Versions: PbootCMS version 0.9.8 Description: The issue allows for CSRF via an "admin.php/Message/mod/id/19.html?backurl=/index.php" request. This results in PHP code injection in the recontent parameter. Recommendations: For PbootCMS version 0.9.8, as...

PT-2018-18894 · Axis +1 · Axis M1033-W +1

Name of the Vulnerable Software and Affected Versions: AXIS M1033-W IP camera Firmware version 5.40.5.1 Description: An issue was discovered where the upload web page does not verify the file type, allowing an attacker to upload a webshell by making a fileUpload.shtml request for a custom .shtml...

Apache httpd information disclosure vulnerability (CNVD-2018-06530)

Apache httpd is the U.S. Apache Apache Software Foundation, an open source HTTP server developed and maintained specifically for modern operating systems. A security vulnerability exists in the 'modsession' function in Apache httpd that stems from a failure to properly restrict security. The...

DEBIAN-CVE-2018-1283

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

ALPINE-CVE-2018-1283

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

DEBIAN-CVE-2018-1303

A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of modcachesocache. The vulnerability is considere...

UBUNTU-CVE-2017-15710

In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, modauthnzldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying the user's credentials. If the header value is not present in the charset...

UBUNTU-CVE-2018-1283

In Apache httpd 2.4.0 to 2.4.29, when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its...

PT-2018-3177

Name of the Vulnerable Software and Affected Versions Apache httpd versions 2.4.0 through 2.4.29 Description The issue arises when mod session is configured to forward its session data to CGI applications, allowing a remote user to influence their content by using a "Session" header. This is due ...

PT-2018-3115

Name of the Vulnerable Software and Affected Versions Apache httpd versions 2.0.23 through 2.0.65 Apache httpd versions 2.2.0 through 2.2.34 Apache httpd versions 2.4.0 through 2.4.29 Description The issue is related to the mod authnz ldap component in Apache httpd, specifically when configured...

PT-2018-3179

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.30 Description A specially crafted HTTP request header could crash the Apache HTTP Server due to an out of bound read while preparing data to be cached in shared memory. This could be used as a Denial o...

UBUNTU-CVE-2016-9575

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary...

CVE-2016-9575

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary...

CVE-2016-9575

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary...

CVE-2016-9575: Incorrect Authorization

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary...

PT-2018-3638

Name of the Vulnerable Software and Affected Versions Apache HTTP Server version 2.4.33 Description The issue is related to the mod md challenge handler, which can dereference a NULL pointer when specially crafted HTTP requests are made, causing the child process to segfault. This can be used to...

SQL injection vulnerability in UQCMS cloud B2B2C multi-store system shop.mod.php file

UQCMS cloud business system is a program using PHP + MYSQL, template using smarty template B2B2C e-commerce software. UQCMS Cloud Business B2B2C multi-store system shop.mod.php file SQL injection vulnerability, an attacker can exploit the vulnerability to obtain database sensitive information...