mellivora

Mellivora Mellivora는 PHP로 작성된 CTF 엔진입니다. 빠른 개요를 원하시나요? imgur의 스크린샷 갤러리를 확인하세요. 빠른 시작을 원하시나요? Docker로 Mellivora 사용하기를 확인하세요. 기능 임의의 카테고리와 챌린지. 선택적 다중 팀 유형이 있는 점수판. 수동 또는 자동 자유 텍스트 제출 마킹. 챌린지 힌트. 팀 진행 페이지. 챌린지 개요 페이지. 카테고리 및 챌린지 노출을 특정 시간으로 제한. 부모 챌린지 해결 시 챌린지 공개 모든 팀 기준. 이메일 정규식을 기반으로 한 선택적 가입 제한...

EUVD-2019-11531

Malware in sbrugna...

CVE-2019-25092

A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...

CVE-2019-25092

A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...

CVE-2019-25092

A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...

Cross site scripting

A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...

CVE-2019-25092 Nakiami Mellivora Admin Panel user.inc.php print_user_ip_log cross site scripting

A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...

CVE-2019-25092 Nakiami Mellivora Admin Panel user.inc.php print_user_ip_log cross site scripting

A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...

CVE-2019-25092

The CVE-2019-25092 issue affects Nakiami Mellivora up to version 2.1.x, specifically the Admin Panel component’s function print_user_ip_log in include/layout/user.inc.php. The vulnerability arises from improper handling of the argument $entry['ip'], enabling cross-site scripting. It can be exploi...

Mellivora 跨站脚本漏洞

Mellivora is a CTF engine written in PHP by the individual developer Nakiami. A cross-site scripting vulnerability exists in Mellivora versions prior to 2.1.x. The vulnerability stems from an incorrect manipulation of a parameter that leads to a cross-site scripting vulnerability...

CVE-2019-25092: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...

[Mellivora] Basic database driven CTF engine

Mellivora is a basic database driven CTF engine written in PHP. Requirements LAMP: PHP 5.3+, MySQL 5.5+, Apache 2.2+. May work with other configurations but this is untested. Installation Download to any directory, say: "/var/www/mellivora/". Create an Apache VHost and point DocumentRoot to...