Vulnerabilities

TI-2014-03155 CVE-2014-3881 · GHSA-2j6m-75p3-p8g5

Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before…

LOW 31

Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00636 Published 2014-06-28 No fix listed CWE-352

TI-2014-01574 CVE-2014-2006 · GHSA-2g89-9m7w-4r5w

Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030…

LOW 22

Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2014-06-28 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before…

Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030…