CVE-2019-17642: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Centreon before 18.10.8, 19.10.1, and 19.04.2. It allows CSRF with resultant remote command execution via shell metacharacters in a POST to centreon-autodiscovery-server/views/scan/ajax/call.php in the Autodiscovery plugin...

mylektsii.ru XSS vulnerability

Open Bug Bounty ID: OBB-558398 Description| Value ---|--- Affected Website:| mylektsii.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...