CVEs published April 22, 2018
10 CVEs were published on April 22, 2018: 0 critical, 0 high.
- Published
- 10
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 10
- CVE-2017-17889Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags o
- CVE-2017-17902SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI.
- CVE-2018-10297Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associate
- CVE-2018-10298Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does
- CVE-2018-10295ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.
- CVE-2018-10296MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter.
- CVE-2018-10285The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms.
- CVE-2018-10286The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL databas
- CVE-2018-9245The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fields that allows users to bypas
- CVE-2018-10289In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file.