CVE-2018-13038

OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability in the article feature’s Attachment Document, allowing an attacker to upload arbitrary PHP code using a .php filename with Content-Type: application/pdf. Root cause is unrestricted file upload in the attachment workflow; impact is ...

CVE-2018-13040

OpenSID 18.06-pasca is affected by a CSRF vulnerability that can add an administrator-level account via the index.php/man_user/insert URI. The issue is described across multiple sources (including CVE-2018-13040 in NVD and CNVD/OSV entries), identifying the vulnerable component as the admin user-...

CVE-2018-13039

OpenSID 18.06-pasca is affected by CVE-2018-13039: a reflected Cross Site Scripting (XSS) vulnerability in the cari parameter, exploitable via index.php/first?cari=. CNVD/CNVD-2018-13871, NVD CVE-2018-13039 and related records describe that a remote attacker can inject script/HTML to access user ...