Hulihanapplications

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Hulihanapplications records in CISA KEV

No Hulihanapplications vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Diamondlist 2 records LOW Amethyst 1 record LOW Hulihan Bxr 1 record LOW

Records

4 records

TI-2010-04686 CVE-2010-4963 · GHSA-wfcj-wxg9-rcr6

SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers…

LOW 35

SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the order_by parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01189 Published 2011-10-09 No fix listed CWE-89

TI-2010-02894 CVE-2010-3024 · GHSA-xjx2-8v8q-jccq

Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in…

LOW 33

Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1)…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01435 Published 2010-08-16 No fix listed CWE-352

TI-2010-04808 CVE-2010-5085 · GHSA-9g53-m8g7-vm8p

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/update_user in…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/update_user in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1)…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00761 Published 2012-02-14 No fix listed CWE-352

TI-2010-02893 CVE-2010-3023 · GHSA-9648-3rxj-pc93

Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) category[description] parameter to user/main/updat…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02572 Published 2010-08-16 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0