1278 matches found
phpbb server-side request forgery vulnerability
phpBB is phpBB group developed a set of open-source use of PHP language development of Web forum software . The software has support for multiple languages , support for multiple databases and customized layout and so on. phpBB server-side request forgery vulnerability exists. Attackers can use...
niushop_b2c Pay.php has xml entity injection vulnerability
Niushop open source mall National first commercial free four-in-one completely open source 100% open source The country's first set of B2B2C multi-user mall + micro letter micro-distribution + e-commerce platform investment operation + iOS, Android multi-platform client PHP open source e-commerce...
intranetsolutions.westlaw.com XSS vulnerability
Vulnerable URL: http://intranetsolutions.westlaw.com/practicepages/template/generalst-ann.asp?WIN=1==1"...
sdm.scad.edu XSS vulnerability
Vulnerable URL: https://sdm.scad.edu/intranet/students/map.php?quarter=Spring%202017=309=1"...
gestimax.dnsalias.com XSS vulnerability
Vulnerable URL: http://gestimax.dnsalias.com/intranet/disposliste.asp?QuartierID==&Grandeur1ID;==0=0=0=0=0=4=1"...
intranet.cshgreenwich.org XSS vulnerability
Vulnerable URL: http://intranet.cshgreenwich.org/heartNet/mediaCenterInfo2.asp?rollfunction=1"...
Server side request forgery (ssrf)
SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access intranet servers via a crafted file parameter...
CVE-2017-9307
SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access intranet servers via a crafted file parameter...
CVE-2017-9307
The CVE-2017-9307 entry concerns a known SSRF issue in Allen Disk 1.6, specifically in remotedownload.php, where a crafted file parameter can be used by remote authenticated users to perform port scans and reach internal network services. The related connected documents corroborate that remotedow...
CVE-2017-9307
SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access intranet servers via a crafted file parameter...
CVE-2017-9307: Server-Side Request Forgery (SSRF)
SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access intranet servers via a crafted file parameter...
PT-2017-18838
Name of the Vulnerable Software and Affected Versions Allen Disk version 1.6 Description The issue allows remote authenticated users to conduct port scans and access intranet servers via a crafted file parameter in the remotedownload.php script. Recommendations For Allen Disk version 1.6, conside...
CVE-2017-0241
An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of...
Privilege escalation
An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of...
CVE-2017-0241
An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of...
CVE-2017-0241
Mode C: CVE-2017-0241 affects Microsoft Edge. The vulnerability is an elevation of privilege when Edge renders a domain-less URL, allowing actions in the Intranet Zone. Affected component: Edge rendering/domain handling; root cause details are not fully enumerated in the provided docs beyond the ...
CVE-2017-0241: Undefined Security Weakness
An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of...
Arbitrary file upload vulnerability in the action/fileUpload.asp file of the Access Specialist management system
Despatch Access Specialist Management System is a CATI software that integrates telephone access, call center, and web survey into one; a CATI software that provides hosted services with "Cloud Computing" and "SaaS Model". An arbitrary file upload vulnerability exists in the action/fileUpload.asp...
Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06593)
Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge suffers from a remote memory corruption vulnerability if a domain less web page is presented in a URI, which could allow an attacker to perform illegal operations in an intranet context and gain unauthorized acces...
Microsoft Edge Elevation of Privilege Vulnerability
A vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of the Internet Zone. To...