Authentication flaw

Systematic IRIS WebForms 5.4 and its functionalities can be accessed and used without any form of authentication...

CVE-2019-18925

The records consistently identify an authentication bypass in Systematic IRIS WebForms 5.4, where “its functionalities can be accessed and used without any form of authentication.” Red Hat and NVD corroborate this as CVE-2019-18925, with a high/critical impact profile (CVSS v3.1: CRITICAL, base s...

CVE-2019-18925

Systematic IRIS WebForms 5.4 and its functionalities can be accessed and used without any form of authentication...

CVE-2019-18924

Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ and variations, it is possible to list all the directories and check if a particular file exists...

CVE-2019-18924

CVE-2019-18924 affects IRIS WebForms 5.4. The root cause is a directory-traversal flaw: manipulating file-referencing variables with ../ and variations allows listing directories and checking for file existence. Exploitation or in-wild details are not provided in the connected documents. Remediat...

PT-2019-15718

Name of the Vulnerable Software and Affected Versions Systematic IRIS WebForms version 5.4 Description The issue allows access to Systematic IRIS WebForms and its functionalities without requiring any form of authentication. Recommendations For version 5.4, ensure that proper authentication...

CVE-2019-18925: Missing Authentication for Critical Function

Systematic IRIS WebForms 5.4 and its functionalities can be accessed and used without any form of authentication...

CVE-2019-18924: Improper Limitation of a Pathname to a Restricted Directory

Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ and variations, it is possible to list all the directories and check if a particular file exists...

PT-2019-15717

Name of the Vulnerable Software and Affected Versions Systematic IRIS WebForms version 5.4 Description The issue allows for directory traversal by manipulating variables that reference files with ../ and variations, making it possible to list all the directories and check if a particular file...

app.mailerlite.com XSS vulnerability

Open Bug Bounty ID: OBB-571526 Description| Value ---|--- Affected Website:| app.mailerlite.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

app.mailerlite.com XSS vulnerability

Open Bug Bounty ID: OBB-403288 Description| Value ---|--- Affected Website:| app.mailerlite.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

Telerik Reporting for ASP.NET WebForms Report Viewer Control Cross-Site Scripting Vulnerability

Telerik Reporting for ASP.NET WebForms Report Viewer control is an ASP.NET-based report generation control developed by Telerik Inc. A cross-site scripting vulnerability exists in Telerik Reporting for ASP.NET WebForms Report Viewer control versions prior to Telerik ASP.NET WebForms Report Viewer...

CVE-2017-9140

Cross-site scripting XSS vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd...

CVE-2017-9140

Cross-site scripting XSS vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd...

Cross site scripting

Cross-site scripting XSS vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd...

CVE-2017-9140

Cross-site scripting XSS vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd...

CVE-2017-9140

The CVE-2017-9140 issue affects Telerik Reporting for ASP.NET WebForms (Telerik.ReportViewer.WebForms.dll) prior to R1 2017 SP2 (11.0.17.406). It is a reflected XSS vulnerability exploitable via the bgColor parameter to Telerik.ReportViewer.axd, allowing attacker-controlled script/HTML execution ...

CVE-2017-9140: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd...

PT-2017-18722

Name of the Vulnerable Software and Affected Versions Telerik Reporting for ASP.NET WebForms Report Viewer control versions prior to 11.0.17.406 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to...

mailerlite.com XSS vulnerability

Open Bug Bounty ID: OBB-157550 Description| Value ---|--- Affected Website:| mailerlite.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...