1496 matches found
CVE-2017-9307
The CVE-2017-9307 entry concerns a known SSRF issue in Allen Disk 1.6, specifically in remotedownload.php, where a crafted file parameter can be used by remote authenticated users to perform port scans and reach internal network services. The related connected documents corroborate that remotedow...
Wordpress plugin Editor.MD cross-site scripting vulnerability
WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers set up a personal blog site.WP Editor.MD is an online Markdown document editor plugin. A cross-site scripting vulnerability exists in the...
Cross site scripting
Cross-site scripting XSS vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web script or HTML persistently by uploading a crafted HTML file. The attack vector is the content of this file, and the filename must be specified in the PATHINFO to readfile.php...
CVE-2017-9249
The CVE-2017-9249 entry describes a Cross-Site Scripting (XSS) vulnerability in Allen Disk 1.6. The issue enables remote authenticated users to persistently inject arbitrary web script or HTML by uploading a crafted HTML file, with the attack vector being the contents of that file and the filenam...
CVE-2017-9249
Cross-site scripting XSS vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web script or HTML persistently by uploading a crafted HTML file. The attack vector is the content of this file, and the filename must be specified in the PATHINFO to readfile.php...
PgBouncer Security Vulnerability
PgBouncer is a lightweight set of database connection pooling tools for PostgreSQL , it can provide a unified view of the links to the client . A security vulnerability exists in version 1.6.x of PgBouncer prior to 1.6.1. A remote attacker can exploit this vulnerability to gain login privileges...
Allen Disk Security Bypass Vulnerability
Allen Disk is a free, open source cloud-based hard disk product that features encrypted file storage, online preview, file sharing and more. A security bypass vulnerability exists in the reg.php file in Allen Disk version 1.6. An attacker can exploit this vulnerability to bypass CAPTCHA with the...
Design/Logic Flaw
reg.php in Allen Disk 1.6 doesn't check if isset$SESSION'captcha''code'==1, which makes it possible to bypass the CAPTCHA via an empty $POST'captcha'...
CVE-2017-9091
/admin/loginc.php in Allen Disk 1.6 doesn't check if isset$SESSION'captcha''code' == 1, which leads to CAPTCHA bypass by emptying $POST'captcha'...
CVE-2017-9090
reg.php in Allen Disk 1.6 doesn't check if isset$SESSION'captcha''code'==1, which makes it possible to bypass the CAPTCHA via an empty $POST'captcha'...
CVE-2017-9091
/admin/loginc.php in Allen Disk 1.6 doesn't check if isset$SESSION'captcha''code' == 1, which leads to CAPTCHA bypass by emptying $POST'captcha'...
CVE-2017-9090
The CVE-2017-9090 issue affects Allen Disk 1.6’s reg.php, where there is no proper check of isset($_SESSION['captcha']['code']), enabling bypass of CAPTCHA via an empty $_POST['captcha']. The vulnerability is documented across multiple feeds (NVD entry with CVSSv2/3 scores indicating low–high imp...
Allen Disk Cross-Site Request Forgery Vulnerability
Allen Disk is a free, open source cloud-based hard disk product that features encrypted file storage, online preview, file sharing and more. A cross-site request forgery vulnerability exists in the setpass.php file in Allen Disk version 1.6. A remote attacker can exploit this vulnerability to...
Allen Disk Cross-Site Scripting Vulnerability
Allen Disk is a free, open source cloud-based hard disk product that features encrypted file storage, online preview, file sharing and more. A cross-site scripting vulnerability exists in the 'id' parameter of the downfile.php file in Allen Disk version 1.6. A remote attacker can exploit this...
CVE-2017-8848
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password...
CVE-2017-8848
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password...
Design/Logic Flaw
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password...
CVE-2017-8848
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password...