|
248071
|
4.8 |
MEDIUM
Network
|
wpulike
|
ulike
|
WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting (XSS) vulnerability in Settings screen that can result in allows unauthorised users to do almost anything an admin can. This attack appear …
|
CWE-79
Cross-site Scripting
|
CVE-2018-1000508
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248072
|
6.5 |
MEDIUM
Network
|
jjj
|
wp_user_groups
|
WP User Groups version 2.0.0 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page that can result in allows anybody to modify user groups and types. This attack appear to be exp…
|
CWE-352
Origin Validation Error
|
CVE-2018-1000507
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248073
|
8.8 |
HIGH
Network
|
mediaron
|
metronet_tag_manager
|
Metronet Tag Manager version 1.2.7 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page /wp-admin/options-general.php?page=metronet-tag-manager that can result in allows anybody…
|
CWE-352
Origin Validation Error
|
CVE-2018-1000506
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248074
|
6.5 |
MEDIUM
Network
|
tooltipy
|
tooltipy
|
Tooltipy (tooltips for WP) version 5 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page that can result in could allow anybody to duplicate posts. This attack appear to be exp…
|
CWE-352
Origin Validation Error
|
CVE-2018-1000505
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248075
|
7.2 |
HIGH
Network
|
redirection
|
redirection
|
Redirection version 2.7.3 contains a ACE via file inclusion vulnerability in Pass-through mode that can result in allows admins to execute any PHP file in the filesystem. This attack appear to be exp…
|
CWE-601
Open Redirect
|
CVE-2018-1000504
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248076
|
4.3 |
MEDIUM
Network
|
mybb
|
mybb
|
MyBB Group MyBB contains a Incorrect Access Control vulnerability in Private forums that can result in Users can view posts from private forums without having the password. This attack appear to be e…
|
CWE-269
Improper Privilege Management
|
CVE-2018-1000503
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248077
|
7.2 |
HIGH
Network
|
mybb
|
mybb
|
MyBB Group MyBB contains a File Inclusion vulnerability in Admin panel (Tools and Maintenance -> Task Manager -> Add New Task) that can result in Allows Local File Inclusion on modern PHP versions an…
|
CWE-829
Inclusion of Functionality from Untrusted Control Sphere
|
CVE-2018-1000502
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248078
|
9.8 |
CRITICAL
Network
|
instant-update
|
instant_update_cms
|
Instant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application/controllers/administration/auth.php that can result in Account Tackover. This attack appear to be exploitab…
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2018-1000501
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248079
|
8.1 |
HIGH
Network
|
busybox
|
busybox
|
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download …
|
CWE-295
Improper Certificate Validation
|
CVE-2018-1000500
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248080
|
9.8 |
CRITICAL
Network
|
xiongmaitech
|
uc-httpd
|
Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-10088
|
2024-11-21 12:40 |
2018-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
