CVE-2015-4027: Undefined Security Weakness

The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner WVS before 10 build 20151125 allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to api/addScan...

PT-2015-6390

Name of the Vulnerable Software and Affected Versions Acunetix Web Vulnerability Scanner WVS versions prior to 10 build 20151125 Description The issue allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to the "api/addScan" API...