Newly added security tests May 11, 2017: CGIemail

Detectify

To bring you the most up-to-date security service and help you stay on top of threats, we update Detectify on a regular basis. Here are some of the latest security tests added to the tool:

  • CVE-2017-5614 cgiemail open redirect
  • CVE-2017-5615 cgiemail http response splitting
  • CVE-2017-5616 cgiemail reflected xss
  • CVE-2017-8295 WordPress Unauthorized Password Reset
  • CVE-2016-10033 WordPress RCE
  • WordPress tracking-code-manager XSS
  • WordPress download-monitor Unauthenticated Log Download
  • WordPress plugin-organizer CSRF
  • WordPress clean-login CSRF

 

Detectify

Complete External Attack Surface Management for AppSec and ProdSec teams.

Check out more content

Introducing Dynamic API Scanning

Application environments are more complex than ever, with APIs forming the critical connective tissue. But this proliferation has created a vast, often invisible, attack surface. …