Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array() that enables a remote attack via a crafted XML document.Read More ...
Continue Reading
June 28, 2022
File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php.Read More ...
Continue Reading
June 28, 2022
A reflected Cross Site Scripting (XSS) in wuzhicms v4.1.0 allows remote attackers to execute arbitrary web script or HTML via the imgurl parameter.Read More ...
Continue Reading
June 28, 2022
Silverstripe silverstripe/assets through 1.10 allows XSS.Read More ...
Continue Reading
June 28, 2022
Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS user if the cwp-core module is not install ...
Continue Reading
June 28, 2022
Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sending the user a malicious form.Read More ...
Continue Reading
June 28, 2022
Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able to see other users API Keys including the Admins API Keys.Read More ...
Continue Reading
June 28, 2022
Prototype Pollution in GitHub repository clever/underscore.deep prior to 0.5.3.Read More ...
Continue Reading
June 28, 2022
Back to Main
