PT-2017-12590

Name of the Vulnerable Software and Affected Versions SLiMS versions 8 Akasia through 8.3.1 Description The issue is related to an arbitrary file reading problem due to directory traversal in the url parameter to "admin/help.php". This can be exploited by remote authenticated librarian users...

Hashtopussy Cross-Site Scripting Vulnerability

Hashtopussy is a cross-platform client-server tool for distributing hash table tasks between multiple computers, featuring portability, stability and multi-user support. A cross-site scripting vulnerability exists in Hashtopussy version 0.4.0. A remote attacker can exploit this vulnerability with...

Synology Photo Station Arbitrary File Download Vulnerability

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A server-side request forgery vulnerability exists in the fileupload.php file in Synology Photo Station versions prior to 6.7.4-3433 and 6.3-2968. A remote attacker can exploit the vulnerabilit...

CVE-2017-11586

dayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync action, related to controllers/Weixin.php...

PT-2017-12121

Name of the Vulnerable Software and Affected Versions dayrui FineCms version 5.0.9 Description The issue concerns URL Redirector Abuse via the url parameter in a sync action, related to the controllers/Weixin.php file. Recommendations For dayrui FineCms version 5.0.9, consider restricting access ...

CVE-2017-11586: URL Redirection to Untrusted Site

dayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync action, related to controllers/Weixin.php...

CVE-2017-10993

Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka Directory Traversal...

PT-2017-11667

Name of the Vulnerable Software and Affected Versions Contao versions prior to 3.5.28 Contao versions 4.x prior to 4.4.1 Description The issue allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL. This can be exploited by a logged-in back-end...

CVE-2017-8896

ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters...

A logged in back end user can include arbitrary existing PHP files by manipulating an URL parameter

More info at https://contao.org/en/news/contao-441.html...

A logged in back end user can include arbitrary existing PHP files by manipulating an URL parameter

More info at https://contao.org/en/news/contao-441.html...

A logged in back end user can include arbitrary existing PHP files by manipulating an URL parameter

More info at https://contao.org/en/news/contao-3528.html...

PHP file inclusion in the back end

Date : 2017-07-12 CVE ID : CVE-2017-10993 Description A logged in back end user can include arbitrary PHP files by manipulating an URL parameter. Since Contao does not allow to upload PHP files in the file manager, the attack is limited to the existing PHP files on the server. Affected versions...

encommun.stm.info XSS vulnerability

Open Bug Bounty ID: OBB-262500 Description| Value ---|--- Affected Website:| encommun.stm.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stihlse.com XSS vulnerability

Vulnerable URL: http://www.stihlse.com/account/periodbal.php?per=1"...

ranguitars.com XSS vulnerability

Vulnerable URL: http://ranguitars.com/index.php/hate?artist=1"...

perseus.tufts.edu XSS vulnerability

Vulnerable URL: http://www.perseus.tufts.edu/hopper/morph?l=1"...

cocopsych.org XSS vulnerability

Vulnerable URL: http://www.cocopsych.org/index.php?Target=practice=search.php=1"...

brownsnursery.com XSS vulnerability

Vulnerable URL: http://www.brownsnursery.com/doptg/index.php?galleryid=1/-///'/"//--...

Inflection: XSS at https://app.goodhire.com/member/GH.aspx

Unescaped input from a URL parameter in the checkout flow was being used as a JavaScript variable for determining what cart contents to render. By manipulating the URL parameter, the researcher was able to execute arbitrary JavaScript on the page...