Design/Logic Flaw

Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services Advanced model, before version 1.0.118, to enumerate open ports...

PT-2019-4339

Name of the Vulnerable Software and Affected Versions SAP HANA Extended Application Services versions prior to 1.0.118 Description The issue is related to insufficient input validation in the SAP HANA Extended Application Services development tool. This can be exploited by a remote attacker to ga...

Server side request forgery (ssrf)

Multiple server-side request forgery SSRF vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbound requests and enumerate open ports via the dbhost parameter to libs/org/adodblite/tests/testadodblite.php, libs/org/adodblite/tests/testdatadictionary.php, or...

PT-2017-7232

Name of the Vulnerable Software and Affected Versions Yeager CMS version 1.2.1 Description The issue allows remote attackers to trigger outbound requests and enumerate open ports. This is achieved via the dbhost parameter to specific API endpoints, including 'libs/org/adodb lite/tests/test adodb...

Server side request forgery (ssrf)

Server-side request forgery SSRF vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter...