[Git][security-tracker-team/security-tracker][master] Add CVE-2018-20718/ajaxplorer

Salvatore Bonaccorso carnil at debian.org
Tue Jan 15 20:28:24 GMT 2019


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8ebfa14b by Salvatore Bonaccorso at 2019-01-15T20:26:27Z
Add CVE-2018-20718/ajaxplorer

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -49,7 +49,7 @@ CVE-2019-6294 (An issue was discovered in EasyCMS 1.5. There is CSRF via the ...
 CVE-2018-20719 (In Tiki before 17.2, the user task component is vulnerable to a SQL ...)
 	- tikiwiki <removed>
 CVE-2018-20718 (In Pydio before 8.2.2, an attack is possible via PHP Object Injection ...)
-	TODO: check
+	- ajaxplorer <itp> (bug #668381)
 CVE-2018-20717 (In the orders section of PrestaShop before 1.7.2.5, an attack is ...)
 	NOT-FOR-US: PrestaShop
 CVE-2018-20716 (CubeCart before 6.1.13 has SQL Injection via the validate[] parameter ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ebfa14ba20e00ffc2824b3f9a64bbea2ab3b85a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ebfa14ba20e00ffc2824b3f9a64bbea2ab3b85a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190115/50b13928/attachment.html>


More information about the debian-security-tracker-commits mailing list