Known Vulnerabilities for products from Allen Disk Project
Listed below are 6 of the newest known vulnerabilities associated with the vendor "Allen Disk Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2017-9307 json | SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access... | Not Provided | 2017-05-31 | 2025-04-20 |
| CVE-2017-9249 json | Cross-site scripting (XSS) vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web script o... | Not Provided | 2017-05-28 | 2025-04-20 |
| CVE-2017-9091 json | /admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA bypass ... | Not Provided | 2017-05-19 | 2025-04-20 |
| CVE-2017-9090 json | reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the CAPT... | Not Provided | 2017-05-19 | 2025-04-20 |
| CVE-2017-8848 json | Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password. | Not Provided | 2017-05-08 | 2025-04-20 |
| CVE-2017-8832 json | Allen Disk 1.6 has XSS in the id parameter to downfile.php. | Not Provided | 2017-05-08 | 2025-04-20 |
Known software with vulnerabilities from Allen Disk Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Allen Disk Project | Allen Disk | 1.5 |