# CVEs published 2019-02-16

5 CVEs were published on February 16, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-8360](https://cve.now/CVE-2019-8360.md): Themerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data\_2.php cate parameter. (no CVSS)
- [CVE-2019-8361](https://cve.now/CVE-2019-8361.md): PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. (no CVSS)
- [CVE-2019-8362](https://cve.now/CVE-2019-8362.md): DedeCMS through V5.7SP2 allows arbitrary file upload in dede/album\_edit.php or dede/album\_add.php, as demonstrated by a dede/album\_edit.php? (no CVSS)
- [CVE-2019-8363](https://cve.now/CVE-2019-8363.md): Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index\[XSS\] value. (no CVSS)
- [CVE-2019-8358](https://cve.now/CVE-2019-8358.md): In Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles is enabled. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-02-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.