Read the docs

Starflow Software

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Starflow Software records in CISA KEV

No Starflow Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hostflow 1 record LOW

Records

1 record in Hostflow · all components

TI-2006-03226 CVE-2006-3328 · GHSA-r488-7mj5-p3cj

new_ticket.cgi in Hostflow 2.2.1-15 allows remote attackers to steal and replay…

Priority LOW 29

new_ticket.cgi in Hostflow 2.2.1-15 allows remote attackers to steal and replay authentication credentials via an IMG tag in the desc parameter ("Ticket Description" field) that points to a URL that captures referer URLs…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01348 Published 2006-06-30 No fix listed
Open these records in search →