# CVEs published 2019-02-23 31 CVEs were published on February 23, 2019: 0 critical, 0 high. Days are UTC. - [CVE-2019-9047](https://cve.now/CVE-2019-9047.md): GoRose v1.0.4 has SQL Injection when the order\_by or group\_by parameter can be controlled. (no CVSS) - [CVE-2019-9062](https://cve.now/CVE-2019-9062.md): PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery (CSRF) in my-account.php. (no CVSS) - [CVE-2019-9063](https://cve.now/CVE-2019-9063.md): PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount. (no CVSS) - [CVE-2019-9064](https://cve.now/CVE-2019-9064.md): PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file. (no CVSS) - [CVE-2019-9065](https://cve.now/CVE-2019-9065.md): PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount. (no CVSS) - [CVE-2019-9066](https://cve.now/CVE-2019-9066.md): PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile. (no CVSS) - [CVE-2019-9048](https://cve.now/CVE-2019-9048.md): An issue was discovered in Pluck 4.7.9-dev1. (no CVSS) - [CVE-2019-9049](https://cve.now/CVE-2019-9049.md): An issue was discovered in Pluck 4.7.9-dev1. (no CVSS) - [CVE-2019-9050](https://cve.now/CVE-2019-9050.md): An issue was discovered in Pluck 4.7.9-dev1. (no CVSS) - [CVE-2019-9051](https://cve.now/CVE-2019-9051.md): An issue was discovered in Pluck 4.7.9-dev1. (no CVSS) - [CVE-2019-9052](https://cve.now/CVE-2019-9052.md): An issue was discovered in Pluck 4.7.9-dev1. (no CVSS) - [CVE-2019-9040](https://cve.now/CVE-2019-9040.md): S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-201 (no CVSS) - [CVE-2019-9041](https://cve.now/CVE-2019-9041.md): An issue was discovered in ZZZCMS zzzphp V1.6.1. (no CVSS) - [CVE-2019-9042](https://cve.now/CVE-2019-9042.md): An issue was discovered in Sitemagic CMS v4.4. (no CVSS) - [CVE-2014-10078](https://cve.now/CVE-2014-10078.md): Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface (no CVSS) - [CVE-2014-10079](https://cve.now/CVE-2014-10079.md): In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of th (no CVSS) - [CVE-2018-20785](https://cve.now/CVE-2018-20785.md): Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices. (no CVSS) - [CVE-2019-9026](https://cve.now/CVE-2019-9026.md): An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. (no CVSS) - [CVE-2019-9027](https://cve.now/CVE-2019-9027.md): An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. (no CVSS) - [CVE-2019-9028](https://cve.now/CVE-2019-9028.md): An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. (no CVSS) - [CVE-2019-9029](https://cve.now/CVE-2019-9029.md): An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. (no CVSS) - [CVE-2019-9030](https://cve.now/CVE-2019-9030.md): An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. (no CVSS) - [CVE-2019-9031](https://cve.now/CVE-2019-9031.md): An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. (no CVSS) - [CVE-2019-9032](https://cve.now/CVE-2019-9032.md): An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. (no CVSS) - [CVE-2019-9033](https://cve.now/CVE-2019-9033.md): An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. (no CVSS) - [CVE-2019-9034](https://cve.now/CVE-2019-9034.md): An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. (no CVSS) - [CVE-2019-9035](https://cve.now/CVE-2019-9035.md): An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. (no CVSS) - [CVE-2019-9036](https://cve.now/CVE-2019-9036.md): An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. (no CVSS) - [CVE-2019-9037](https://cve.now/CVE-2019-9037.md): An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. (no CVSS) - [CVE-2019-9038](https://cve.now/CVE-2019-9038.md): An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. (no CVSS) - [CVE-2018-18692](https://cve.now/CVE-2018-18692.md): A reflected Cross-Site scripting (XSS) vulnerability in SEMCO Semcosoft 5.3 allows remote attackers to inject arbitrary web scripts or HTML (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2019-02-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.