Business Logic Errors

microweber/microweber is vulnerable to business logic errors. The vulnerability exists in the login function of UserManager.php due to lack of validations in user headers which allows a malicious attacker to bypass IP detection and perform brute-force attacks...

IPPlan Cross-Site Scripting Vulnerability

IPPlan is a web-based multilingual TCP IP address management IPAM software and tracking tool. Simplifying the management of the IP address space, IPPlan version 4.92b is vulnerable to a cross-site scripting vulnerability, which stems from a cross-site scripting XSS vulnerability found in...