SBA Security Advisory – Vtiger CRM – Stored Cross-Site Scripting (CVE-2022-38335)

September 28, 2022

Vtiger CRM 7.4.0 or below is prone to a stored cross-site scripting vulnerability in the email templates module due to insufficient sanitizing. Read More

SBA Security Advisory – Vtiger CRM – Stored Cross-Site Scripting (CVE-2022-38335)

SBA Security Advisory – Shibboleth Identity Provider OIDC OP Plugin – Server-Side Request Forgery (CVE-2022-24129)

February 1, 2022

Shibboleth Identity Provider OIDC OP plugin 3.0.3 or below is prone to a server-side request forgery (SSRF) vulnerability due to an insufficient restriction of the request_uri parameter. This allows unauthenticated attackers to interact with arbitrary third-party HTTP services. We recommend to update Shibboleth Identity Provider OIDC OP plugin to version 3.0.4 or later. For further details, see the full security advisory. Read More

SBA Security Advisory – Shibboleth Identity Provider OIDC OP Plugin – Server-Side Request Forgery (CVE-2022-24129)

SBA Security Advisory – Monsta FTP – Stored Cross-Site Scripting (CVE-2020-14055)

July 1, 2020

Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding. Read More

SBA Security Advisory – Monsta FTP – Stored Cross-Site Scripting (CVE-2020-14055)

SBA Security Advisory – Monsta FTP – Server-Side Request Forgery (CVE-2020-14056)

July 1, 2020

Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch functionality. This allows attackers to read arbitrary local files and interact with arbitrary third-party services. Read More

SBA Security Advisory – Monsta FTP – Server-Side Request Forgery (CVE-2020-14056)

SBA Security Advisory – Monsta FTP – Arbitrary File Read and Write (CVE-2020-14057)

July 1, 2020

Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code execution in common deployments. Read More

SBA Security Advisory – Monsta FTP – Arbitrary File Read and Write (CVE-2020-14057)

SBA Security Advisory – WordPress Plugin – All in One SEO Pack – Stored XSS (CVE-2019-16520)

October 23, 2019

The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement. We recommend to update the all-in-one-seo-pack plugin to version 3.2.7 or later. For further details, see the full security advisory. Read More

SBA Security Advisory – WordPress Plugin – All in One SEO Pack – Stored XSS (CVE-2019-16520)

SBA Security Advisory – WordPress Plugin – Broken Link Checker – Reflected XSS (CVE-2019-16521)

October 23, 2019

The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The filter function on the page listing all detected broken links can be exploited by providing an XSS payload in the s_filter GET parameter in a filter_id=search request. NOTE: this is an end-of-life product. Read More

SBA Security Advisory – WordPress Plugin – Broken Link Checker – Reflected XSS (CVE-2019-16521)

SBA Security Advisory – WordPress Plugin – EU Cookie Law (GDPR) – Stored XSS (CVE-2019-16522)

October 23, 2019

The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of several configuration options in the admin area and the displayed cookie consent message. This affects Font Color, Background Color, and the Disable Cookie text. An attacker with high privileges can attack other users. Read More

SBA Security Advisory – WordPress Plugin – EU Cookie Law (GDPR) – Stored XSS (CVE-2019-16522)

SBA Security Advisory – WordPress Plugin – Events Manager – Stored XSS (CVE-2019-16523)

October 23, 2019

The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and insertion of data provided to the attribute map_style of shortcodes (locations_map and events_map) provided by the plugin. Read More

SBA Security Advisory – WordPress Plugin – Events Manager – Stored XSS (CVE-2019-16523)

SBA Security Advisory – Easy FancyBox WordPress Plugin – Stored Cross-site Scripting (XSS) (CVE-2019-16524)

September 25, 2019

The Easy FancyBox WordPress Plugin Version 1.8.17 is susceptible to Stored Cross-site Scripting in the Settings > Media admin page /wp-admin/options-media.php due to improper encoding of arbitrarily submitted setting parameters. The vulnerability affects every publicly accessible page of the WordPress site. We recommend to update Easy FancyBox WordPress Plugin to version 1.8.18 or later. For further details, see the full security advisory. Read More

Name	SBA Research Cookie
Provider	SBA Research
Purpose	Saves the settings of the visitors selected in the cookie box.
Cookie name	sba-research-cookie
Cookie runtime	1 year

Name	YouTube
Provider	YouTube
Purpose	Used to unblock YouTube content.
Privacy policy	https://policies.google.com/privacy
Host(s)	google.com
Cookie name	NID
Cookie runtime	6 months

Name	Vimeo
Provider	Vimeo
Purpose	Used to unblock Vimeo content.
Privacy policy	https://vimeo.com/privacy
Host(s)	player.vimeo.com
Cookie name	vuid
Cookie runtime	2 years

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Tag: Security Advisory

SBA Security Advisory – Vtiger CRM – Stored Cross-Site Scripting (CVE-2022-38335)

SBA Security Advisory – Shibboleth Identity Provider OIDC OP Plugin – Server-Side Request Forgery (CVE-2022-24129)

SBA Security Advisory – Monsta FTP – Stored Cross-Site Scripting (CVE-2020-14055)

SBA Security Advisory – Monsta FTP – Server-Side Request Forgery (CVE-2020-14056)

SBA Security Advisory – Monsta FTP – Arbitrary File Read and Write (CVE-2020-14057)

SBA Security Advisory – WordPress Plugin – All in One SEO Pack – Stored XSS (CVE-2019-16520)

SBA Security Advisory – WordPress Plugin – Broken Link Checker – Reflected XSS (CVE-2019-16521)

SBA Security Advisory – WordPress Plugin – EU Cookie Law (GDPR) – Stored XSS (CVE-2019-16522)

SBA Security Advisory – WordPress Plugin – Events Manager – Stored XSS (CVE-2019-16523)

SBA Security Advisory – Easy FancyBox WordPress Plugin – Stored Cross-site Scripting (XSS) (CVE-2019-16524)

SBA Newsletter

Upcoming events @ SBA

SBA Research at a glance

Highlights of the past years:

SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Tag: Security Advisory

SBA Newsletter

Highlights of the past years:

Privacy settings

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.