Webatall

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Webatall records in CISA KEV

No Webatall vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Web@all 2 records LOW

Records

2 records in Web@all · all components

TI-2012-02783 CVE-2012-3231 · GHSA-4h99-hpvc-jr58

Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded…

LOW 33

Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01514 Published 2012-06-27 No fix listed CWE-352

TI-2012-02784 CVE-2012-3232 · GHSA-w8hj-p6g7-662c

Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded…

LOW 23

Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote attackers to inject arbitrary web script or HTML via the _text[title] parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01283 Published 2012-06-29 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0