Skip to content
OpenAdvisories

Vendor

Podcastgenerator

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    PodcastGenerator 3.2.9 Blind Server-Side Request Forgery via XML Injection

    PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload form. Attackers can manipulate the 'shortdesc' parameter to trigger external HTTP requests to arbitrary endpoints durin…