Lucene search
K

8 matches found

CNVD
CNVD
added 2020/06/02 12:0 a.m.1 views

Lexiglot Code Issue Vulnerability

Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. A code issue vulnerability exists in Lexiglot 2014-11-20 and earlier versions. An attacker can exploit the vulnerability with the help of the 'svnurl' parameter to cause the server to send a forged...

8.8CVSS7.1AI score0.00958EPSS
Exploits1References1
CNVD
CNVD
added 2020/06/02 12:0 a.m.4 views

Lexiglot Path Traversal Vulnerability

Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. A path traversal vulnerability exists in Lexiglot 2014-11-20 and earlier versions, which can be exploited by remote attackers to obtain sensitive information full path with the help of...

5.3CVSS6.7AI score0.01368EPSS
Exploits1References1
CNVD
CNVD
added 2020/06/02 12:0 a.m.2 views

Lexiglot Information Disclosure Vulnerability (CNVD-2020-36284)

Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. An information disclosure vulnerability exists in Lexiglot 2014-11-20 and earlier versions, which stems from the presence of usernames and passwords on the command line and can be exploited by a local...

7.8CVSS6.2AI score0.00319EPSS
Exploits1References1
CNVD
CNVD
added 2020/06/02 12:0 a.m.3 views

Lexiglot Resource Management Error Vulnerability

Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. A resource management error vulnerability exists in Lexiglot 2014-11-20 and earlier versions, which stems from the fact that the api/update.php file uses a large amount of resources when performing sv...

7.5CVSS6.9AI score0.01099EPSS
Exploits1References1
NVD
NVD
added 2020/06/01 5:15 p.m.16 views

CVE-2014-8942

Lexiglot through 2014-11-20 allows CSRF...

8.8CVSS8.7AI score0.00485EPSS
Exploits1References1
Prion
Prion
added 2020/06/01 5:15 p.m.13 views

Design/Logic Flaw

Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information names and details of projects by visiting the /update.log URI...

5CVSS6.8AI score0.01113EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2020/06/01 5:15 p.m.13 views

Cross site request forgery (csrf)

Lexiglot through 2014-11-20 allows CSRF...

6.8CVSS7.1AI score0.00485EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2020/06/01 5:15 p.m.20 views

Command injection

admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...

7.5CVSS7.9AI score0.02441EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder