Idleman

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Idleman records in CISA KEV

No Idleman vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Leed 3 records LOW

Records

3 records

TI-2013-02312 CVE-2013-2627 · GHSA-8gfg-pqqx-3q76

SQL injection vulnerability in action.php in Leed (Light Feed), possibly before 1.5…

LOW 35

SQL injection vulnerability in action.php in Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to execute arbitrary SQL commands via the id parameter in a removeFolder action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01146 Published 2013-12-21 No fix listed CWE-89

TI-2013-02313 CVE-2013-2628 · GHSA-82v5-32ph-37ww

Multiple cross-site request forgery (CSRF) vulnerabilities in action.php in Leed (Light…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in action.php in Leed (Light Feed), possibly before 1.5 Stable, allow remote attackers to hijack the authentication of administrators for unspecified requests, r…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0069 Published 2013-12-21 No fix listed CWE-352

TI-2013-02314 CVE-2013-2629 · GHSA-vh2x-p6qx-6244

Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass…

LOW 26

Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the (1) importForm, (2) importFeed, (3) addFavorite, or (4) removeFavorite actions in action.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01389 Published 2013-12-23 No fix listed CWE-20

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0