EUVD-2020-16514

Malware in sbrugna...

Denial Of Service (DoS)

silverstripe/framework is vulnerable to denial of service. The vulnerability exist in xml2array function in Convert.php due to quadratic blowup in Convert::xml2array which allows remote attacker to crash the system via crafted XML document...

Cross site scripting

A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed...

CVE-2020-23774

A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed...

stampsnz.com XSS vulnerability

Vulnerable URL: https://stampsnz.com/convert.php?amount=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3E1.5 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4868584 VIP website...