PT-2013-3870

Name of the Vulnerable Software and Affected Versions SilverStripe version 3.0.3 Description The issue allows remote attackers to conduct phishing attacks without detection by the victim, as the security/MemberLoginForm.php in the affected version supports login using a GET request. Recommendatio...

PT-2013-6109

Name of the Vulnerable Software and Affected Versions SilverStripe version 3.0.3 Description The issue allows remote or local attackers to obtain sensitive information by reading web-server access logs, web-server Referer logs, or the browser history. This is due to the support of credentials in ...