Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Posh Project Component: Posh Clear all filters
TI-2014-01753 CVE-2014-2214 · GHSA-pq6c-xmq3-56qm

Multiple cross-site scripting (XSS) vulnerabilities in POSH (aka Posh portal or Portaneo)…

Priority LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in POSH (aka Posh portal or Portaneo) 3.0 through 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) error parameter to /includes/plugins/m…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00817 Published 2019-11-22 No fix listed CWE-79
TI-2014-01752 CVE-2014-2213 · GHSA-9gvx-79rg-73x7

Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1…

Priority LOW 30

Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01443 Published 2019-11-22 No fix listed CWE-601
TI-2014-01751 CVE-2014-2212 · GHSA-2vq9-q9w6-2hh6

The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo)…

Priority LOW 25

The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of the password in cleartext in a cookie, which allows attackers…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01251 Published 2014-04-01 No fix listed CWE-255