Open Redirect

silverstripe/framework is vulnerable to Open Redirect. The vulnerability exists due to the lack of a validated url restriction in the pregmatch parameter of Director.php which allows an attacker to redirect a user to a malicious URL...

ziyuan.eol.cn XSS vulnerability

Vulnerable URL: http://ziyuan.eol.cn/director.php?action=click=17898=www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 31.05.2016 Latest check for patch:| 31.05.2016 20:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

SilverStripe < 2.3.6 Multiple Vulnerabilities

Binary data 5345.prm...