PT-2017-16395

Name of the Vulnerable Software and Affected Versions b2j contact extension versions prior to 2.1.13 Description The issue allows prediction of a uniqid value based on knowledge of a time value, making it easier to read arbitrary uploaded files. Recommendations For versions prior to 2.1.13, updat...

Command injection

textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be a remote attack if a web application accepts names of arbitrary uploaded files...