CVE-2018-19559

CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the referenceid parameter...

CVE-2018-19559

CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the referenceid parameter...

Sql injection

CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the referenceid parameter...

HackerOne: SECURITY: Referencing previous Reports attachment_IDs on new Reports via Draft_Sync DELETES Attachments

Issue New HackerOne exciting addition is the ability to include inline images by using their referenceID, which is in this case Fxxxxx. The reference ID is bind to the its report ContextID and cant be referenced by others unique reference Is seems that if the referenceID is used in another newest...