Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Oscar

Oscar

Not a member

Oscar's latest activity

Thursday, February 17 2022
1460 Exponent CMS 2.6.0 patch2 - Insecure file upload (RCE Upload new extension) was updated in Exponent CMS
  • Oscar
    Oscar commented at 4:12 PM

    Any functionality that allows functions/actions other than those planned are cases of abuse, regardless of the context (the impact is given by the rating). Abus...
Tuesday, January 25 2022
1461 Exponent CMS 2.6.0 patch2 Stored Cross-Site Scripting (User-Agent) was created in Exponent CMS
  • Oscar
    Oscar created the ticket at 3:42 PM

    Bug description

    Exponent CMS 2.6.0 patch2 allows an authenticated user to inject Javascript code on the User-Agent when logging in.
    When an administrator user v...
Monday, January 24 2022
1460 Exponent CMS 2.6.0 patch2 - Insecure file upload (RCE Upload new extension) was created in Exponent CMS
  • Oscar
    Oscar created the ticket at 5:32 PM

    Bug description

    Exponent CMS 2.6.0 patch2 allows an authenticated admin user to upload a malicious extension in the format of a zip file with a php file inside ...
1459 Exponent CMS 2.6.0 patch2 Stored Cross-Site Scripting Vulnerability was created in Exponent CMS
  • Oscar
    Oscar created the ticket at 4:38 PM

    Bug description

    Exponent CMS 2.6.0 patch2 allows an authenticated admin user to inject persistent javascript code inside the "Site/Organization Name,Site Title ...