CVE-2018-17092

Summary: DonLinkage 6.6.8 is affected by a SQL injection in the /pages/proxy/php.php and /pages/proxy/add.php endpoints. The vulnerability allows an attacker to obtain information from the database when input is specially crafted. The attack can only be triggered by an authorized user, per the di...

CVE-2018-17090

DonLinkage 6.6.8 contains a stored XSS vulnerability in the modules /pages/bazy/bazy_adresow.php and /pages/proxy/add.php. The issue is triggered by closing a followed by tags, allowing injected script execution. The CVE entries and CNVD/CVE references confirm this XSS in DonLinkage 6.6.8; no p...

CVE-2018-17091

CVE-2018-17091 affects DonLinkage 6.6.8, where a direct request to files/temporary.txt can disclose potentially sensitive information. The connected documents confirm this information-disclosure vector and the affected software version, but do not provide concrete remediation steps or patch detai...