>> ARCHIVE: 2018-04

WampServer version 3.1.1 suffers from cross site request forgery and cross site scripting vulnerabilities.

Joomla AcySMS component version 3.5.0 suffers from a CSV macro injection vulnerability.

Homematic CCU2 version 2.29.23 suffers from a remote command execution vulnerability.

Systematic SitAware suffers from a denial of service vulnerability.

MiniCMS version 1.10 suffers from a cross site request forgery vulnerability.

osCommerce version 2.3.4.1 suffers from a code execution vulnerability.

Joomla Acymailing Starter component version 5.9.5 suffers from a CSV macro injection vulnerability.

WordPress Contact Form 7 to Database Extension plugin version 2.10.32 suffers from a CSV injection vulnerability.

Nginx version 1.3.10 may suffer from a line feed injection issue in its Accept-Encoding header.

Frog CMS version 0.9.5 suffers from a cross site request forgery vulnerability.