CVE-2018-25415: Improper Neutralization of Special Elements used in an SQL Command

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the director parameter. Attackers can send GET requests to director.php with crafted SQL payloads in the director parameter to...

Open Redirect

silverstripe/framework is vulnerable to Open Redirect. The vulnerability exists due to the lack of a validated url restriction in the pregmatch parameter of Director.php which allows an attacker to redirect a user to a malicious URL...

ziyuan.eol.cn XSS vulnerability

Vulnerable URL: http://ziyuan.eol.cn/director.php?action=click=17898=www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 31.05.2016 Latest check for patch:| 31.05.2016 20:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

CVE-2010-5188: Exposure of Sensitive Information to an Unauthorized Actor

SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the 1 debugmemory parameter to core/control/Director.php or 2 debugprofile parameter to main.php...

SilverStripe < 2.3.6 Multiple Vulnerabilities

Binary data 5345.prm...