PT-2017-17140

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description A Cross-Site Scripting XSS issue exists due to insufficient filtration of user-supplied data, specifically video data, passed to the "webpagetest-master/www/speedindex/index.php" URL. This allows an attacker...

CVE-2017-6537: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data bgcolor passed to the webpagetest-master/www/video/view.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context o...

PT-2017-17141

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data, such as benchmark and time, passed to the "webpagetest-master/www/benchmarks/delta.php" URL. Thi...

CVE-2017-6538: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data video passed to the webpagetest-master/www/speedindex/index.php URL. An attacker could execute arbitrary HTML and script code in a browser in the conte...

CVE-2017-6533: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data benchmark passed to the webpagetest-master/www/benchmarks/view.php URL. An attacker could execute arbitrary HTML and script code in a browser in the...

CVE-2017-6536: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data url, pssid passed to the webpagetest-master/www/weblite.php URL. An attacker could execute arbitrary HTML and script code in a browser in the...

CVE-2017-6539: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data benchmark, time passed to the webpagetest-master/www/benchmarks/delta.php URL. An attacker could execute arbitrary HTML and script code in a...

PT-2017-17139

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description A Cross-Site Scripting XSS issue exists due to insufficient filtration of user-supplied data, specifically the bgcolor variable, passed to the "webpagetest-master/www/video/view.php" URL. This allows an...

PT-2017-17135

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description A Cross-Site Scripting XSS issue exists due to insufficient filtration of user-supplied data, specifically the benchmark variable, passed to the "webpagetest-master/www/benchmarks/view.php" URL. This allows ...

PT-2017-17143

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data, such as benchmark and time, passed to the "/webpagetest-master/www/benchmarks/viewtest.php" API...

Authorization

An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerabl...

CVE-2017-6396

An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerabl...

CVE-2017-6396

An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerabl...

CVE-2017-6396

An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerabl...

CVE-2017-6396

An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerabl...

CVE-2017-6396

The CVE-2017-6396 entry concerns WPO-Foundation WebPageTest 3.0, where insufficient filtration of user-supplied data passed to webpagetest-master/www/compare-cf.php enables an attacker to execute arbitrary HTML/JavaScript in a victim browser (XSS). The vulnerability affects the specific URL path ...

PT-2017-17037

Name of the Vulnerable Software and Affected Versions WPO-Foundation WebPageTest version 3.0 Description An issue exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. This allows an attacker to execute arbitrary HTML and script cod...

CVE-2017-6396: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerabl...

WPO-Foundation WebPageTest Cross-Site Scripting Vulnerability

WebPagetest is a Web application that takes a URL and a set of configuration parameters as input and runs a performance test on that URL. A cross-site scripting vulnerability exists in WPO-Foundation WebPageTest, which occurs due to a failure to properly validate user-submitted data. The...

webpagetest <= 2.6 - Multiple Vulnerabilities

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com 2012-07-11 WebPagetest = 2.6 Multiple Vulnerabilities Script: WebPagetest provides a system for...