Subsonic 6.1.1 Persistent XSS

Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SUBSONIC-CSRF-PERSISTENT-XSS.txt + ISR: ApparitionSec Vendor: ================ www.subsonic.org Product: =============== subsonic v6.1.1 Subsonic is a media streaming...

Subsonic 6.1.1 XML External Entity Attack

Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SUBSONIC-XML-EXTERNAL-ENITITY.txt + ISR: ApparitionSec Vendor: ================ www.subsonic.org Product: =============== subsonic v6.1.1 Subsonic is a media streaming...

Subsonic 6.1.1 Password Reset Cross Site Request Forgery

Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SUBSONIC-PASSWORD-RESET-CSRF.txt + ISR: ApparitionSec Vendor: ================ www.subsonic.org Product: =============== subsonic v6.1.1 Subsonic is a media streaming...

CVE-2008-2391

SubSonic allows remote attackers to bypass pagesize limits and cause a denial of service CPU consumption via a pageindex aka data page number of -1...

Design/Logic Flaw

SubSonic allows remote attackers to bypass pagesize limits and cause a denial of service CPU consumption via a pageindex aka data page number of -1...

CVE-2008-2391

SubSonic allows remote attackers to bypass pagesize limits and cause a denial of service CPU consumption via a pageindex aka data page number of -1...

CVE-2008-2391

CVE-2008-2391 affects SubSonic. The vulnerability allows remote attackers to bypass pagesize limits and trigger a denial-of-service via a pageindex (data page number) of -1, causing CPU consumption. Affected product is SubSonic (details specify improper handling of pageindex values leading to DoS...

CVE-2008-2391: Improper Input Validation

SubSonic allows remote attackers to bypass pagesize limits and cause a denial of service CPU consumption via a pageindex aka data page number of -1...