Postrev

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Postrev records in CISA KEV

No Postrev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Post Revolution 3 records LOW

Records

3 records

TI-2011-01725 CVE-2011-1954 · GHSA-w72q-pr5j-gvx4

Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to (1) ajax-weblog-guardar.php, (2) v…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00671 Published 2011-06-06 No fix listed CWE-352

TI-2011-01723 CVE-2011-1952 · GHSA-2xx2-7jhq-rw7v

common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial…

LOW 26

common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup, as demonstrated by an a< sequence.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01543 Published 2011-06-06 No fix listed CWE-399

TI-2011-01724 CVE-2011-1953 · GHSA-26pm-x559-r4h2

Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitrary web script or HTML via an attribute of a (1) P, a (2) STRONG, a (3) A, a (4)…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01141 Published 2011-06-06 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0