• Planet eStream Code Execution / SQL Injection / XSS / Broken Control

    From Security Bot@2:250/1 to All on Fri Mar 3 00:22:00 2023


    Planet eStream Code Execution / SQL Injection / XSS / Broken Control

    Planet eStream versions prior to 6.72.10.07 suffer from shell upload,
    account takeover, broken access control, SQL injection, both persistent
    and reflective cross site scripting, path traversal, and information
    disclosure vulnerabilities.

    https://packetstormsecurity.com/files/170175/SA-20221130-0.txt

    Fri, 09 Dec 2022 14:38:55 GMT
    ________________________________
    --- The information is for inforamtional purposes only.
    * Origin: Read us with http://winpoint.org JID: rs@captflint.com