CVE-2023-32699

MeterSphere is an open source continuous testing platform. Version 2.9.1 and prior are vulnerable to denial of service. ​The checkUserPassword method is used to check whether the password provided by the user matches the password saved in the database, and the CodingUtil.md5 method is used to...

CVE-2023-32699 MeterSphere denial of service vulnerability

MeterSphere is an open source continuous testing platform. Version 2.9.1 and prior are vulnerable to denial of service. ​The checkUserPassword method is used to check whether the password provided by the user matches the password saved in the database, and the CodingUtil.md5 method is used to...

Traefik HTTP header parsing could cause a denial of service

Impact There is a vulnerability in Go when parsing the HTTP headers, which impacts Traefik. HTTP header parsing could allocate substantially more memory than required to hold the parsed headers. This behavior could be exploited to cause a denial of service. References - CVE-2023-24534 Patches -...

CVE-2017-9360

WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php...

Cross site scripting

WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php...

CVE-2017-9361

WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php...

CVE-2017-9361

WebsiteBaker v2.10.0 is affected by a stored XSS vulnerability in /account/details.php (CVE-2017-9361). The CNVD entry CNVD-2017-08708 states the vulnerability exists in WebsiteBaker 2.10.0 and a remote attacker can inject arbitrary web script or HTML. The EU/NVD records similarly describe a stor...

CVE-2017-9361

WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php...

CVE-2017-9360

WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php...

CVE-2017-9360

WebsiteBaker v2.10.0 is affected by a SQL injection in /account/details.php. The CNVD entry confirms a remote attacker can exploit this to execute arbitrary SQL commands, implying severe impact on confidentiality, integrity, and possibly availability. The CVE entry itself notes a SQL injection vu...