>> ARCHIVE: 2018-12

Alumni Tracer SMS version Notification suffers from cross site request forgery and remote SQL injection vulnerabilities.

Tourism Website version Blog suffers from code execution and remote SQL injection vulnerabilities.

PrestaShop versions 1.6.x and 1.7.x suffer from a remote code execution vulnerability.

TP-Link Archer C1200 suffers from a cross site scripting vulnerability.

Adobe ColdFusion 2018 suffers from a remote shell upload vulnerability.

Huawei B315s-22 suffers from an information disclosure vulnerability.

ThinkPHP versions prior to 5.0.23 and prior to 5.1.31 suffer from a remote code execution vulnerability.

WordPress AutoSuggest plugin version 0.24 suffers from a remote SQL injection vulnerability.

Apache OFBiz version 16.11.05 suffers from a cross site scripting vulnerability.

HotelDruid version 2.3 suffers from a remote SQL injection vulnerability.