https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-08T21:30:25.608084+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cnvd-2018-24618 cnvd-2018-24618 2026-11-08T21:30:25.610570+00:00 cnvd-2018-24618 https://db.gcve.eu/vuln/fkie_cve-2018-19836 fkie_cve-2018-19836 2026-11-08T21:30:25.610632+00:00

In Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including the Cookie header), and common.inc.php allows registering variables from the $_COOKIE value. This issue can, for example, be exploited in conjunction with CVE-2018-19835 to bypass many XSS filters such as the Chrome XSS filter.

 https://db.gcve.eu/vuln/ghsa-6crq-3244-cpgv GHSA-6crq-3244-cpgv 2026-11-08T21:30:25.610685+00:00

In Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including the Cookie header), and common.inc.php allows registering variables from the $_COOKIE value. This issue can, for example, be exploited in conjunction with CVE-2018-19835 to bypass many XSS filters such as the Chrome XSS filter.

 https://db.gcve.eu/vuln/gsd-2018-19836 gsd-2018-19836 2026-11-08T21:30:25.610712+00:00 gsd-2018-19836