CVE-2014-10078

CVE-2014-10078 is an XSS vulnerability in Vembu StoreGrid 4.4.x affecting the web interfaces at interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface/registerclient/onlineregfailure.php, and interface/registercustomer/onlineregfailure.php. The...

CVE-2014-10079

CVE-2014-10079 affects Vembu StoreGrid 4.4.x. The vulnerability is an information disclosure where the front page of the server web interface leaks the private IP address through a hidden ipaddress form value in the HTML source, caused by incorrect processing of an index.php/ trailing slash. This...