CVE-2018-18777

CVE-2018-18777 : MicroStrategy Web 7 is vulnerable to a directory traversal/local file inclusion via the parameter subpage of “/WebMstr7/servlet/mstrWeb”. Remote authenticated users can bypass SecurityManager restrictions and list a parent directory using “/..” in the pathname. Public references ...

CVE-2018-18775

Microstrategy Web, version 7 , is vulnerable to Cross-Site Scripting (XSS) due to insufficient encoding of user-controlled inputs. The vulnerability specifically affects the Login.asp Msg parameter . Successful exploitation could allow an attacker to execute arbitrary scripts in the victim's brow...

CVE-2018-18776

CVE-2018-18776 concerns MicroStrategy Web 7, where an XSS vulnerability arises because input is not sufficiently encoded. The issue is exploitable via the admin/admin.asp ShowAll parameter, enabling a cross-site scripting attack. The product is deprecated, and multiple external sources (including...