Sourcetreesolutions

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Sourcetreesolutions records in CISA KEV

No Sourcetreesolutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mojoportal 3 records LOW

Records

3 records

TI-2010-03432 CVE-2010-3603 · GHSA-579f-rm77-fpx9

Cross-site request forgery (CSRF) vulnerability in the file manager service…

LOW 35

Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for request…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02457 Published 2010-09-24 No fix listed CWE-352

TI-2010-03431 CVE-2010-3602 · GHSA-9jcf-26mj-wqj2

Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and…

LOW 27

Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03768 Published 2010-09-24 No fix listed CWE-79

TI-2013-04558 CVE-2013-5320 · GHSA-x9mh-g65h-7rhq

Cross-site scripting (XSS) vulnerability in Forums/EditPost.aspx in mojoPortal before…

LOW 24

Cross-site scripting (XSS) vulnerability in Forums/EditPost.aspx in mojoPortal before 2.3.9.8 allows remote attackers to inject arbitrary web script or HTML via the txtSubject parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02096 Published 2013-08-20 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0