PT-2017-12004

Name of the Vulnerable Software and Affected Versions Statamic framework versions prior to 2.6.0 Description The issue arises from incorrect permission checking for sessions when methods from a user's class are invoked. This affects various methods, including resetPassword, createNewAccount, and...

PT-2015-6037

Name of the Vulnerable Software and Affected Versions SysAid Help Desk versions prior to 15.2 Description The issue allows remote attackers to create administrator accounts via a crafted request to "/createnewaccount" or write to arbitrary files via the fileName parameter to "/userentry"...