267 matches found
Timing Attack
craftcms/cms is vulnerable to timing attack. The application uses the strcmp function that compares hashes in non-constant time, allowing an attacker to use the timing of the request to progressively identify the current PHP session id...
Information Disclosure
craftcms/cms is vulnerable to information disclosure. The application does not ensure that the path passed is safe, allowing a malicious user to have access to any file in the craft/app directory...
Cross-site Scripting (XSS)
craftcms/cms is vulnerable to cross-site scripting XSS attacks. The library is does not restrict direct access to the TemplateController, allowing a malicious user to inject and execute arbitrary web script...
Cross-site Scripting (XSS)
craftcms/cms is vulnerable to cross-site scripting XSS attacks. The library does not properly encode HTML in the control panel, allowing a malicious user to inject and execute arbitrary webscript...
Information Disclosure
craftcms/cms is vulnerable to information disclosure. A malicious user can use the redirect URL parameter in src/controllers/BaseController.php to display arbitrary sensitive information...