Blakduk

An issue in Mojoportal allows an unauthenticated attacker to register a new user even if the Allow User Registrations feature is disabled.

A stored cross-site scripting (XSS) issue was found in the /api/public/register/family API endpoint. This could potentially allow attackers to inject malicious scripts into the application.

The issue allows an authenticated attacker to list all css files inside the root path of the webserver via manipulation of the `s` parameter in "/DesignTools/ManageSkin.aspx".

The issue is an authenticated XML external entity (XXE) injection vulnerability. This means that an attacker who has authenticated access to the system can potentially inject malicious XML code to access sensitive data or disrupt the system.

The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `EID` parameter at the "GetText.php" endpoint.

A SQL injection issue was found in the Event Attendance reports module, specifically via the `Event` parameter.

The issue concerns the CSV Import function, which allows attackers to execute arbitrary code by importing a crafted CSV file.

The issue is a stored cross-site scripting (XSS) vulnerability in the Company Info Settings component. This allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `txtCompanyName` parameter.

A reflected cross-site scripting (XSS) vulnerability in the FileDialog.aspx component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `ed` and `tbi` parameters. This vulnerability exists due to the lack of measures to neutralize special elements used in the operating system command. Exploitation of the vulnerability may allow a remote attacker to conduct a cross-site scripting (XSS) attack.

The issue is related to a directory traversal vulnerability in the diagnostics function of the Reprise License Manager (RLM) web interface. This vulnerability allows RLM users with sufficient privileges to overwrite any file on the server.

The issue concerns a CRLF vulnerability in the Reprise License Manager (RLM) web interface. This vulnerability is located in the `password` parameter of the View License Result function, allowing remote attackers to inject arbitrary HTTP headers.

A Server-Side Request Forgery (SSRF) issue was discovered in the Reprise License Manager (RLM) web interface, allowing remote attackers to trigger outbound requests to intranet servers and conduct port scans. This is achieved via the `actserver` parameter in the License Activation function.