>> ARCHIVE: 2019-01

phpMoAdmin version 1.1.5 suffers from cross site request forgery and cross site scripting vulnerabilities.

BMC Remedy and ITAM versions 7.1.00 and 9.1.02.003 suffer from multiple information disclosure vulnerabilities.

WordPress UserPro plugin versions prior to 4.9.21 suffers from a user registration privilege escalation vulnerability.

MyT Project Management version 1.5.1 suffers from a remote SQL injection vulnerability.

The BMC Network Automation allows authenticated users to hijack established remote sessions of other users, version v8.7.00.000 b383 u038 was confirmed to be vulnerable.

TWiki version 6.0.2 suffers from a cross site scripting vulnerability.

Huawei E5330 version 21.210.09.00.158 suffers from a cross site request forgery vulnerability.

KioWare Server version 4.9.6 suffers from a weak folder privilege escalation vulnerability.

Roxy Fileman version 1.4.5 suffers from remote file upload and directory traversal vulnerabilities.

Ox App Suite versions 7.8.4 and 7.8.3 suffer from cross site scripting, cross site request forgery, and information disclosure vulnerabilities.