Skip to content
OpenAdvisories

Vendor

midgetspy

3 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 6.1

    Sickbeard build-507 Reflected XSS via testNaming pattern Parameter

    Sickbeard through build-507 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the pattern parameter of /config/postProcessing/testNaming. Attackers can craft GET requests with malicious SVG…

  • Medium 5.3

    Sickbeard 0.1 - Cross-Site Request Forgery

    Sickbeard alpha contains a cross-site request forgery vulnerability that allows attackers to disable authentication by submitting crafted configuration parameters. Attackers can trick users into submitting a malicious form that clears web username and passwor…