69 matches found
Cross site scripting
Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting XSS or open redirect attacks...
CVE-2015-3257
Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting XSS or open redirect attacks...
CVE-2015-3257
Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting XSS or open redirect attacks...
CVE-2015-3257
The CVE-2015-3257 entry affects Zend/Diactoros (Uri::filterPath) prior to version 1.0.4. The root cause is improper sanitization of path input, enabling remote attackers to perform cross-site scripting (XSS) or open redirects. The impact is client-facing URL parsing vulnerabilities that could lea...
CVE-2015-3257
Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting XSS or open redirect attacks...
CVE-2015-3257: Improper Neutralization of Input During Web Page Generation
Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting XSS or open redirect attacks...
PT-2017-6655
Name of the Vulnerable Software and Affected Versions zend-diactoros versions prior to 1.0.4 Description The issue arises from improper sanitization of path input by Zend/Diactoros/Uri::filterPath in zend-diactoros, allowing remote attackers to perform cross-site scripting XSS or open redirect...
Zend zend-diactoros has multiple vulnerabilities
Zend Framework is a set of open source PHP5 development framework , it is mainly used for the development of Web programs and services . zend-diactoros is an implementation of PSR-7 HTTP messages . A cross-site scripting vulnerability and an open redirection vulnerability exists in Zend...
