Vulnerabilities

TI-2010-02894 CVE-2010-3024 · GHSA-xjx2-8v8q-jccq

Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in…

LOW 33

Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1)…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01435 Published 2010-08-16 No fix listed CWE-352

TI-2010-02893 CVE-2010-3023 · GHSA-9648-3rxj-pc93

Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) category[description] parameter to user/main/updat…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02572 Published 2010-08-16 No fix listed CWE-79

Vulnerabilities

Filters

Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in…

Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly…