Ortus Solutions Testbox Command Injection Vulnerability

Ortus Solutions Ortus Solutions Testbox is a behavior-driven testing framework for ColdFusion environments from Ortus Solutions, USA. A security vulnerability in Ortus TestBox versions 2.4.0 through 4.1.0, which originates from an unvalidated query string parameter passed to...

CVE-2017-17425

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSourceDeviceSet Get method requests. The issue...