7 matches found
CVE-2018-25415: Improper Neutralization of Special Elements used in an SQL Command
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the director parameter. Attackers can send GET requests to director.php with crafted SQL payloads in the director parameter to...
Open Redirect
silverstripe/framework is vulnerable to Open Redirect. The vulnerability exists due to the lack of a validated url restriction in the pregmatch parameter of Director.php which allows an attacker to redirect a user to a malicious URL...
ziyuan.eol.cn XSS vulnerability
Vulnerable URL: http://ziyuan.eol.cn/director.php?action=click=17898=www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 31.05.2016 Latest check for patch:| 31.05.2016 20:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
CVE-2010-5188
SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the 1 debugmemory parameter to core/control/Director.php or 2 debugprofile parameter to main.php...
CVE-2010-5188: Exposure of Sensitive Information to an Unauthorized Actor
SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the 1 debugmemory parameter to core/control/Director.php or 2 debugprofile parameter to main.php...
PT-2012-1400
Name of the Vulnerable Software and Affected Versions SilverStripe versions 2.3.x through 2.3.5 Description The issue allows remote attackers to obtain sensitive information. This can be achieved via the debug memory parameter to "core/control/Director.php" or the debug profile parameter to...
