imsebao/404team

Releases0

Stars3

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-10431 ↗	Apr 26, 2018Thursday, 26 April 2018, 17:29	—	6.5 MEDIUM
D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen.
CVE-2018-9993 ↗	Apr 10, 2018Tuesday, 10 April 2018, 21:29	—	3.5 LOW
YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/## page (aka a news center page).
CVE-2018-8069 ↗	Mar 12, 2018Monday, 12 March 2018, 05:29	—	3.5 LOW
QCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI.
CVE-2018-8070 ↗	Mar 12, 2018Monday, 12 March 2018, 05:29	—	3.5 LOW
QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI.
CVE-2018-7547 ↗	Feb 27, 2018Tuesday, 27 February 2018, 21:29	4.8 MEDIUM	3.5 LOW
lyadmin 1.x has XSS via the config[WEB_SITE_TITLE] parameter to the /admin.php?s=/admin/config/groupsave.html URI.
CVE-2018-6561 ↗	Feb 2, 2018Friday, 2 February 2018, 15:29	—	4.3 MEDIUM
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.
CVE-2018-6313 ↗	Jan 25, 2018Thursday, 25 January 2018, 22:29	—	3.5 LOW
Cross-site scripting (XSS) in WBCE CMS 1.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the Modify Page screen, a different issue than CVE-2017-2118.
CVE-2018-5215 ↗	Jan 4, 2018Thursday, 4 January 2018, 19:29	—	3.5 LOW
Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter.
CVE-2018-5216 ↗	Jan 4, 2018Thursday, 4 January 2018, 19:29	—	3.5 LOW
Radiant CMS 1.1.4 has XSS via crafted Markdown input in the part_body_content parameter to an admin/pages/*/edit resource.
CVE-2017-15539 ↗	Oct 17, 2017Tuesday, 17 October 2017, 21:29	—	7.5 HIGH
SQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php.
CVE-2017-14345 ↗	Sep 12, 2017Tuesday, 12 September 2017, 18:29	—	7.5 HIGH
SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php.
CVE-2017-14346 ↗	Sep 12, 2017Tuesday, 12 September 2017, 18:29	—	7.5 HIGH
upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image/jpeg, image/pjpeg, image/png, or image/gif content type for a .php file.