Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•12 views

CVE-2021-43437: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multiple websites are hosted on the same IP address. This is where the Host Header comes in. Thi...

8.8CVSS6AI score0.01268EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/20 12:00 a.m.•11 views

PT-2021-23843

Name of the Vulnerable Software and Affected Versions sourcecodetester Engineers Online Portal affected versions not specified Description The issue allows an attacker to manipulate the Host header, causing the web application to behave in unexpected ways. This is particularly relevant when...

8.8CVSS0.01268EPSS
SaveExploits0References6
Rows per page
Query Builder