Vulnerabilities

TI-2011-04503 CVE-2011-5226 · GHSA-g58g-3cj2-cwq2

Cross-site request forgery (CSRF) vulnerability in wordpress_sentinel.php in the Sentinel…

LOW 33

Cross-site request forgery (CSRF) vulnerability in wordpress_sentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snap…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01222 Published 2012-10-25 No fix listed CWE-352

TI-2011-04502 CVE-2011-5225 · GHSA-39gp-f464-jp5h

Cross-site scripting (XSS) vulnerability in wordpress_sentinel.php in the Sentinel plugin…

LOW 25

Cross-site scripting (XSS) vulnerability in wordpress_sentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02483 Published 2012-10-25 No fix listed CWE-79

TI-2011-04501 CVE-2011-5224 · GHSA-g42v-6vx7-992j

SQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote…

LOW 38

SQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02736 Published 2012-10-25 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in wordpress_sentinel.php in the Sentinel…

Cross-site scripting (XSS) vulnerability in wordpress_sentinel.php in the Sentinel plugin…

SQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote…