CVE-2014-8942

Lexiglot through 2014-11-20 allows CSRF...

CVE-2014-8943

CVE-2014-8943 affects Lexiglot up to 2014-11-20 and enables a server-side request forgery (SSRF) via the admin.php?page=projects svn_url parameter. The available documents identify the vulnerable component as Lexiglot (PHP-based translation platform) and point to the svn_url parameter as the inje...

CVE-2014-8943

Lexiglot through 2014-11-20 allows SSRF via the admin.php?page=projects svnurl parameter...

CVE-2014-8944

Lexiglot through 2014-11-20 allows XSS Reflected via the username, or XSS Stored via the admin.php?page=config installname, intromessage, or newfilecontent parameter...

CVE-2014-8937

Lexiglot through 2014-11-20 allows denial of service because api/update.php launches svn update operations that use a great deal of resources...

CVE-2014-8937

The CVE-2014-8937 entry concerns Lexiglot (PHP-based translation platform) up to version released 2014-11-20. The vulnerability stems from api/update.php performing svn update operations that consume substantial server resources, leading to denial of service. The connected documents confirm the c...

CVE-2014-8939

Lexiglot (PHP-based translation platform) is affected by CVE-2014-8939 via a path traversal-like leakage: remote attackers can obtain the full filesystem path by requesting include/smarty/plugins/modifier.date_format.php when PHP is configured to emit warnings. The core detail reported across sou...

CVE-2014-8939

Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information full path via an include/smarty/plugins/modifier.dateformat.php request if PHP has a non-recommended configuration that produces warning messages...

CVE-2014-8940

Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information names and details of projects by visiting the /update.log URI...

CVE-2014-8940

The CVE-2014-8940 entry affects Lexiglot (a PHP-based translation platform). The vulnerability is an information disclosure allowing remote attackers to obtain names and details of projects by accessing the /update.log URI, with impact described as exposure of limited data (names and project deta...

CVE-2014-8945

CVE-2014-8945 affects Lexiglot, a PHP-based translation platform. The vulnerability is a command injection in admin.php?page=projects, exploitable through the username and password fields. Multiple sources confirm the issue, noting it affects Lexiglot releases up to and including 2014-11-20. The ...