PT-2015-3649

Name of the Vulnerable Software and Affected Versions Maian Uploader version 4.0 Description The issue allows remote attackers to obtain sensitive information. This is achieved by sending a request without the height parameter to the "load flv.js.php" endpoint, which in turn reveals the...

PT-2015-3650

Name of the Vulnerable Software and Affected Versions Maian Uploader version 4.0 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities that allow remote attackers to hijack the authentication of unspecified users. This can lead to requests that conduct cross-site...