Information Disclosure

Ezsystems/ezplatform-solr-search-engine is vulnerable to Information Disclosure. The vulnerability exists due to an authentication flaw in Endpoint.php, allowing an attacker to gain sensitive information...

Design/Logic Flaw

ARC aka ARC2 through 2011-12-01 allows reflected XSS via the endpoint.php query parameter in an output=htmltab action...