Vendor
Gladinet
15 known vulnerabilities.
1 result · Clear filters · Feed
-
Medium 6.5
CentreStack < 17.4 Session Injection via SelectProvider.aspx
CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.a…