CVE-2017-9307

Mô tả

Tham khảo

• s3131212/allendisk · Third Party Advisory

Lỗ hổng khác của allen disk

• CVE-2017-9249TRUNG BÌNH 5.4Cross-site scripting (XSS) vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web script or HTML persiste…
• CVE-2017-9091CAO 7.5/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA bypass by emptying $_P…
• CVE-2017-9090CAO 7.5reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the CAPTCHA via an empt…
• CVE-2017-8848TRUNG BÌNH 6.5Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password.
• CVE-2017-8832TRUNG BÌNH 6.1Allen Disk 1.6 has XSS in the id parameter to downfile.php.