Livestreet

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Livestreet records in CISA KEV

No Livestreet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Livestreet 3 records LOW

Records

3 records

TI-2009-03105 CVE-2009-3261 · GHSA-gcv4-v78m-cc85

update/update_0.1.2_to_0.2.php in LiveStreet 0.2 does not require administrative…

LOW 36

update/update_0.1.2_to_0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0144 Published 2009-09-18 No fix listed CWE-287

TI-2009-03104 CVE-2009-3260 · GHSA-fq5r-xr7f-93pp

Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to…

LOW 23

Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01269 Published 2009-09-18 No fix listed CWE-79

TI-2009-03100 CVE-2009-3256 · GHSA-7g9x-xhfc-88x2

Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2…

LOW 23

Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the URI, as demonstrated by a SCRIPT element in an arbitrary para…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01253 Published 2009-09-18 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0