what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Niklas Schilling

Statamic CMS Cross Site Scripting

Posted Feb 14, 2024

Authored by Niklas Schilling | Site sec-consult.com

Statamic CMS versions prior to 4.46.0 and 3.4.17 suffer from multiple persistent cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

advisories | CVE-2024-24570

SHA-256 | 4c644d027d53cfba4c907e383ad879b026a3cfe941cbb9d3addd3ec2ec8ade1a

Download | Favorite | View

PTC - Codebeamer Cross Site Scripting

Posted Sep 18, 2023

Authored by Niklas Schilling | Site sec-consult.com

PTC - Codebeamer versions 22.10-SP7 and below, 22.04-SP5 and below, and 21.09-SP13 and below suffer from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2023-4296

SHA-256 | a3e11343a596c27acafa688a8dc7b67a179c5d43d4e4c49067b5f5f15cf9e85a

Download | Favorite | View

ILIAS eLearning 7.15 Command Injection / XSS / LFI / Open Redirect

Posted Dec 9, 2022

Authored by Anna Hartig, Niklas Schilling, Constantin Schwarz | Site sec-consult.com

ILIAS eLearning versions 7.15 and below suffer from authenticated command injection, persistent cross site scripting, local file inclusion, and open redirection vulnerabilities.

tags | exploit, local, vulnerability, xss, file inclusion

advisories | CVE-2022-45915, CVE-2022-45916, CVE-2022-45917, CVE-2022-45918

SHA-256 | ee31da97db0bda4a3b42019ff3e199e34d24625e0b83fa1d18f2b97da9c2728c

Download | Favorite | View