CVE-2017-16250

CVE-2017-16250 affects Mitel ST, specifically version 14.2 GA28 and earlier. The issue arises from an API function that allows enumeration of user-ids, which can be used to identify valid user ids and the corresponding user names. Public descriptions in multiple sources (NVD/CNVD) state the vulne...

CVE-2017-16250

A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the API function to enumerate through user-ids which could be used to identify valid user ids and associated user names...

CVE-2017-16251

The CVE-2017-16251 entry concerns Mitel ST’s conferencing component (GA28 and earlier). A vulnerability exists where an authenticated user can upload a malicious script to the Personal Library via a crafted POST request, potentially allowing arbitrary code execution within the application context...

st-group.com XSS vulnerability

Open Bug Bounty ID: OBB-579572 Description| Value ---|--- Affected Website:| st-group.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stalbansnth.vic.edu.au XSS vulnerability

Open Bug Bounty ID: OBB-563972 Description| Value ---|--- Affected Website:| stalbansnth.vic.edu.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stalbansnth.vic.edu.au XSS vulnerability

Open Bug Bounty ID: OBB-553323 Description| Value ---|--- Affected Website:| stalbansnth.vic.edu.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

st-clares.lancsngfl.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-551743 Description| Value ---|--- Affected Website:| st-clares.lancsngfl.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-andrews.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-548441 Description| Value ---|--- Affected Website:| st-andrews.ac.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

ptu.moe-st.gov.mm XSS vulnerability

Open Bug Bounty ID: OBB-486178 Description| Value ---|--- Affected Website:| ptu.moe-st.gov.mm Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-tropez.nl XSS vulnerability

Open Bug Bounty ID: OBB-477938 Description| Value ---|--- Affected Website:| st-tropez.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-felix-de-lodez.fr XSS vulnerability

Open Bug Bounty ID: OBB-459529 Description| Value ---|--- Affected Website:| st-felix-de-lodez.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

st-germain-sous-doue.fr XSS vulnerability

Open Bug Bounty ID: OBB-459517 Description| Value ---|--- Affected Website:| st-germain-sous-doue.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

st-marys-rc78.lancsngfl.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-388552 Description| Value ---|--- Affected Website:| st-marys-rc78.lancsngfl.ac.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

Directory traversal

Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path...

UBUNTU-CVE-2014-3744

Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path...

CVE-2014-3744

The CVE-2014-3744 issue is a directory traversal vulnerability in the Node.js st module prior to 0.2.5. Vulnerable versions mishandle URL-encoded dots (e.g., %2e and %2e%2e), allowing remote attackers to read arbitrary files on the server. Evidence from multiple sources confirms the affected comp...

st-paul-theater.com XSS vulnerability

Open Bug Bounty ID: OBB-361009 Description| Value ---|--- Affected Website:| st-paul-theater.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Open Redirect

Overview st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 redirect to an entirely different domain. A request for: http://some.server.com//nodesecurity.org/%2e%2e would result in a 301 to //nodesecurity.org/%2e%2e which most browsers trea...

stjean.org XSS vulnerability

Vulnerable URL: http://www.stjean.org/apps/news/shownews.jsp?RECID=461679=0=News%20Post%20Summer%20Reading%20List%20-%20St.%20Jean%20Baptiste%20High%20School%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E=true Details: Description| Value ---|--- Patched:| Yes, at 15.10.2017 Latest check for patch:|...

sthelena.k12.ca.us XSS vulnerability

Vulnerable URL: http://www.sthelena.k12.ca.us/apps/news/shownews.jsp?RECID=415566=0=News%20Post%20BAC%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3Ena%20Unified%20School%20District Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclose...