Santafox

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Santafox records in CISA KEV

No Santafox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Santafox 2 records LOW

Records

2 records

TI-2010-03296 CVE-2010-3464 · GHSA-q4q5-jq84-74pm

Cross-site request forgery (CSRF) vulnerability in admin/manager_users.class.php in…

LOW 31

Cross-site request forgery (CSRF) vulnerability in admin/manager_users.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests, as demonstrate…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0063 Published 2010-09-17 No fix listed CWE-352

TI-2010-03295 CVE-2010-3463 · GHSA-2h66-v8cx-v4cx

Cross-site scripting (XSS) vulnerability in modules/search/search.class.php in SantaFox…

LOW 22

Cross-site scripting (XSS) vulnerability in modules/search/search.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the search parameter to search.html.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01075 Published 2010-09-17 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0