Unrestricted File Upload

Kirby is vulnerable to unrestricted file upload. The vulnerability is due to the absence of validation or checks for the file type or file extension during the upload process. This allows attackers to bypass server protections and upload files not intended for the upload target, potentially leadi...

ReviewBoard Vulnerabilities

ReviewBoard www.reviewboard.org aims to 'take the pain out of code review'. Integration with source control makes it imperative to maintain proper protections on this server. I have worked with the developers to resolve multiple XSS conditions and harden web server configurations. The XSS...