Microstrategy Web 7 - Local File Inclusion

Microstrategy Web 7 is vulnerable to local file inclusion via "/WebMstr7/servlet/mstrWeb" in the parameter subpage. Remote authenticated users can bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used by a web application. NOTE: this i...

Microstrategy Web 7 - Cross-Site Scripting

Microstrategy Web 7 does not sufficiently encode user-controlled inputs, resulting in cross-site scripting via the Login.asp Msg parameter. id: CVE-2018-18775 info: name: Microstrategy Web 7 - Cross-Site Scripting author: 0xAkoko severity: medium description: Microstrategy Web 7 does not...

MicroStrategy Web 10.4 - Information Disclosure

MicroStrategy Web 10.4 is susceptible to information disclosure. The JVM configuration, CPU architecture, installation folder, and other information are exposed through /MicroStrategyWS/happyaxis.jsp. An attacker can use this vulnerability to learn more about the application environment and there...

MicroStrategy Library <11.1.3 - Cross-Site Scripting

MicroStrategy Library before 11.1.3 contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...

CVE-2019-18957

Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS...

EUVD-2020-3806

Malware in sbrugna...

EUVD-2019-8625

Malware in sbrugna...

EUVD-2018-18630

Malware in sbrugna...

EUVD-2020-17524

Malware in sbrugna...

EUVD-2019-4071

Malware in sbrugna...

EUVD-2020-15740

Malware in sbrugna...

EUVD-2020-3805

Malware in sbrugna...

EUVD-2020-15741

Malware in sbrugna...

EUVD-2020-15742

Malware in sbrugna...

EUVD-2020-15743

Malware in sbrugna...

EUVD-2020-15739

Malware in sbrugna...

EUVD-2020-3808

Malware in sbrugna...

EUVD-2018-10492

Malware in sbrugna...

EUVD-2019-4061

Malware in sbrugna...

EUVD-2022-33928

Malicious code in bioql PyPI...