47 matches found
DevDojo Voyager vulnerable to reflected Cross-site Scripting
DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed...
GHSA-35P2-5VRH-M3P6 DevDojo Voyager Arbitrary File Write
DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server...
DevDojo Voyager vulnerable to path traversal
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass...
GHSA-J63M-2VR6-FV7M DevDojo Voyager vulnerable to path traversal
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass...
CVE-2024-55416
DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed...
CVE-2024-55417
DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server...
CVE-2024-55415
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass...
CVE-2024-55416
DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed...
CVE-2024-55415
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass...
CVE-2024-55417
DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server...
CVE-2024-55415
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass...
CVE-2024-55415: Improper Limitation of a Pathname to a Restricted Directory
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass...
PT-2025-1308
Name of the Vulnerable Software and Affected Versions DevDojo Voyager versions 1.8.0 and earlier Description The issue allows an attacker to gain access to sensitive information through path traversal at the "/admin/compass" API endpoint. This vulnerability is related to errors in handling relati...
CVE-2024-55416: Improper Neutralization of Input During Web Page Generation
DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed...
CVE-2024-55417
DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server...
CVE-2024-55415
DevDojo Voyager (through version 1.8.0 ) is vulnerable to a path traversal flaw located at the /admin/compass endpoint. The root cause stems from improper validation of user-supplied input, which allows an attacker to traverse directories and access restricted files. This vulnerability can lead t...
CVE-2024-55417
DevDojo Voyager versions through 1.8.0 are vulnerable to a file type verification bypass in the /admin/media/upload endpoint. An authenticated user can exploit this flaw to upload a web shell, leading to arbitrary code execution on the server with web server privileges. To remediate this vulnerab...
CVE-2024-55416
DevDojo Voyager versions 1.8.0 and earlier are vulnerable to reflected Cross-Site Scripting (XSS) via the /admin/compass endpoint. The root cause stems from a lack of protection for website structure, allowing an attacker to manipulate an authenticated user into clicking a malicious link. This ca...