Vendor
Podcastgenerator
5 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.8
PodcastGenerator 3.2.9 Blind Server-Side Request Forgery via XML Injection
PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload form. Attackers can manipulate the 'shortdesc' parameter to trigger external HTTP requests to arbitrary endpoints durin…