Lucene search
+L

28 matches found

Github Security Blog
Github Security Blog
•added 2022/06/20 8:13 p.m.•6 views

Malware in code-oss-dev-build

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/14 2:48 a.m.•39 views

GHSA-FH35-P8PH-P545 Silverstripe CMS Open Redirect

Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build...

5.8CVSS6.4AI score0.02012EPSS
SaveExploits2References5
Friends Of PHP
Friends Of PHP
•added 2016/02/17 5:55 p.m.•23 views

SS-2015-028: Missing security check on dev/build/defaults

More info at https://www.silverstripe.org/download/security-releases/ss-2015-028/...

7.2AI score
SaveExploits0Affected Software1
Friends Of PHP
Friends Of PHP
•added 2015/09/14 9:17 a.m.•26 views

SS-2015-015: XSS in dev/build returnURL Parameter

More info at https://www.silverstripe.org/software/download/security-releases/ss-2015-015/...

7.2AI score
SaveExploits0Affected Software1
CNVD
CNVD
•added 2015/06/26 12:00 a.m.•23 views

SilverStripe CMS & Framework Open Redirect Vulnerability

SilverStripe CMS & Framework is a CMS content management system. An open redirect vulnerability exists in SilverStripe CMS & Framework version 3.1.13. A remote attacker can exploit the vulnerability by using the URL in the 'returnURL' parameter of the dev/build URI to redirect the user to an...

5.8CVSS6.8AI score0.02012EPSS
SaveExploits2References1
Mend
Mend
•added 2015/06/24 2:00 p.m.•9 views

CVE-2015-5062

Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build...

6.3CVSS0.02012EPSS
SaveExploits2References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/06/24 12:00 a.m.•6 views

CVE-2015-5062: Undefined Security Weakness

Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build...

5.8CVSS6AI score0.02012EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2015/06/24 12:00 a.m.•6 views

PT-2015-6760

Name of the Vulnerable Software and Affected Versions SilverStripe CMS & Framework version 3.1.13 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved by manipulating a URL in the returnURL parameter to the /dev/buil...

5.8CVSS6.1AI score0.02012EPSS
SaveExploits2References9
Rows per page
Query Builder