Researchers
Back
Ahmet Gürel
#21878
of 60,596
14.2
Total CVSS
Vulnerabilities
·
2
Medium
1
High
1
PT-2018-10646
2018-06-01
8.8
CVE-2018-11538
Searchblox
Searchblox
The issue concerns a CSRF token bypass in the servlet/UserServlet endpoint. This allows for potential exploitation via the `u name`, `u passwd1`, `u passwd2`, `role`, and `X-XSRF-TOKEN` POST parameters.
PT-2018-18900
2018-04-02
5.4
CVE-2018-9163
Zoho
Zoho Manageengine Recovery Manager Plus
A stored Cross-site scripting (XSS) issue allows remote authenticated users with Add New Technician permissions to inject arbitrary web script or HTML via the `loginName` field to the "technicianAction.do" endpoint.