CVE-2019-18665

SECUDOS DOMOS (before 5.6) is affected by CVE-2019-18665 via the Log module, enabling Local File Inclusion. Multiple sources confirm an LFI exists in the Log module that could let an attacker read arbitrary server files. Impact is read access to sensitive files; no exploitation details are provid...

CVE-2019-18665

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18664: Improper Neutralization of Input During Web Page Generation

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

CVE-2019-18665: Improper Limitation of a Pathname to a Restricted Directory

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

Cross site scripting in the system log

Date : 2018-04-18 CVE ID : CVE-2018-10125 Description With a manipulated request, an attacker can implant a script which is executed when a logged in back end user opens the system log. The attacker does not have to be logged in. Affected versions Contao 3. up to 3.5.33 Contao 4.0 Contao 4.1 Cont...