Design/Logic Flaw

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

Cross site scripting

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

CVE-2019-18664

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

CVE-2019-18664

The affected software is SECUDOS DOMOS, specifically the Log module. The vulnerability is a Cross-Site Scripting (XSS) flaw in the Log module prior to version 5.6, arising from insufficient validation of client-side data in the web application. Impact is client-side code execution within the affe...

CVE-2019-18665

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18665

SECUDOS DOMOS (before 5.6) is affected by CVE-2019-18665 via the Log module, enabling Local File Inclusion. Multiple sources confirm an LFI exists in the Log module that could let an attacker read arbitrary server files. Impact is read access to sensitive files; no exploitation details are provid...

PT-2019-15565

Name of the Vulnerable Software and Affected Versions SECUDOS DOMOS versions prior to 5.6 Description The issue affects the Log module, allowing for cross-site scripting XSS attacks. Recommendations For versions prior to 5.6, update to version 5.6 or later to resolve the issue...

PT-2019-15566

Name of the Vulnerable Software and Affected Versions SECUDOS DOMOS versions prior to 5.6 Description The issue concerns the Log module in SECUDOS DOMOS, which allows local file inclusion. Recommendations For versions prior to 5.6, update to version 5.6 or later to resolve the issue...

CVE-2019-18664: Improper Neutralization of Input During Web Page Generation

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

CVE-2019-18665: Improper Limitation of a Pathname to a Restricted Directory

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

Cross site scripting in the system log

Date : 2018-04-18 CVE ID : CVE-2018-10125 Description With a manipulated request, an attacker can implant a script which is executed when a logged in back end user opens the system log. The attacker does not have to be logged in. Affected versions Contao 3. up to 3.5.33 Contao 4.0 Contao 4.1 Cont...