Webpagetest Project

Webpagetest

10 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2017-6533

Exploit
  • EPSS 0.2%
  • Veröffentlicht 08.03.2017 08:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (benchmark) passed to the webpagetest-master/www/benchmarks/view.php URL. An attacker could execute ar...

6.1

CVE-2017-6534

Exploit
  • EPSS 0.22%
  • Veröffentlicht 08.03.2017 08:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (pssid) passed to the webpagetest-master/www/pss.php URL. An attacker could execute arbitrary HTML and...

6.1

CVE-2017-6535

Exploit
  • EPSS 0.22%
  • Veröffentlicht 08.03.2017 08:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, url) passed to the webpagetest-master/www/benchmarks/trendurl.php URL. An attack...

6.1

CVE-2017-6536

Exploit
  • EPSS 0.22%
  • Veröffentlicht 08.03.2017 08:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (url, pssid) passed to the webpagetest-master/www/weblite.php URL. An attacker could execute...

6.1

CVE-2017-6537

Exploit
  • EPSS 0.22%
  • Veröffentlicht 08.03.2017 08:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (bgcolor) passed to the webpagetest-master/www/video/view.php URL. An attacker could execute arbitrary...

6.1

CVE-2017-6538

Exploit
  • EPSS 0.22%
  • Veröffentlicht 08.03.2017 08:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (video) passed to the webpagetest-master/www/speedindex/index.php URL. An attacker could execute arbit...

6.1

CVE-2017-6539

Exploit
  • EPSS 0.22%
  • Veröffentlicht 08.03.2017 08:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, time) passed to the webpagetest-master/www/benchmarks/delta.php URL. An attacker...

6.1

CVE-2017-6540

Exploit
  • EPSS 0.22%
  • Veröffentlicht 08.03.2017 08:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (configs) passed to the webpagetest-master/www/benchmarks/compare.php URL. An attacker could...

6.1

CVE-2017-6541

Exploit
  • EPSS 0.22%
  • Veröffentlicht 08.03.2017 08:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, time) passed to the webpagetest-master/www/benchmarks/viewtest.php URL. An attac...

6.1

CVE-2017-6396

  • EPSS 0.22%
  • Veröffentlicht 02.03.2017 06:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script co...