📦 Pilos

CVE-2023-47107 is a host header injection vulnerability in PILOS that allows attackers to manipulate password reset URLs to point to malicious servers, potentially capturing reset tokens. This affects...

This vulnerability allows attackers with stolen session tokens to maintain access to PILOS accounts even after users change their passwords. It affects PILOS (Platform for Interactive Live-Online Semi...

PILOS before version 4.8.0 has a CORS misconfiguration that reflects the Origin header without validation while allowing credentials. This could theoretically allow malicious websites to make cross-or...

PILOS (Platform for Interactive Live-Online Seminars) before version 4.8.0 exposes the PHP version via the X-Powered-By HTTP header, allowing attackers to fingerprint the server and identify potential...