Storegrid@4.4 Security Vulnerabilities and Issues — Storegrid@4.4 CVE List

Lucene search

VembuStoregrid4.4

2 matches found

CVE•added 2019/02/23 2:29 p.m.•53 views

CVE-2014-10078

Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface/registerclient/onlineregfailure.php, and interface/registercustomer/onlineregfailure.php.

6.1CVSS5.4AI score0.02689EPSS

CVE•added 2019/02/23 2:29 p.m.•48 views

CVE-2014-10079

In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of the HTML source code, which is disclosed because of incorrect processing of an index.php/ trailing slash.

5.3CVSS5.4AI score0.13824EPSS