CVEs published February 16, 2019
5 CVEs were published on February 16, 2019: 0 critical, 0 high.
- Published
- 5
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 5
- CVE-2019-8360Themerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data_2.php cate parameter.
- CVE-2019-8361PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar.
- CVE-2019-8362DedeCMS through V5.7SP2 allows arbitrary file upload in dede/album_edit.php or dede/album_add.php, as demonstrated by a dede/album_edit.php?
- CVE-2019-8363Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value.
- CVE-2019-8358In Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles is enabled.