Vulnerabilities

TI-2021-15654 CVE-2021-37845 · GHSA-hh3j-j42w-mrpm

An issue was discovered in Citadel through webcit-932.

LOW 19

An issue was discovered in Citadel through webcit-932.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00665 Published 2023-05-29 No fix listed

TI-2020-17741 CVE-2020-29547 · GHSA-xhj4-5383-37r2

An issue was discovered in Citadel through webcit-926.

LOW 28

An issue was discovered in Citadel through webcit-926.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00753 Published 2023-05-29 No fix listed CWE-77

TI-2020-16824 CVE-2020-27739 · GHSA-f928-h33x-jm46

A Weak Session Management vulnerability in Citadel WebCit through 926 allows…

MEDIUM 46

A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in users' sessions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01836 Published 2020-10-28 No fix listed CWE-613

TI-2020-16827 CVE-2020-27742 · GHSA-p628-386j-64h8

An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows…

LOW 31

An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg_confirm_move template.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0115 Published 2020-10-28 No fix listed CWE-639

TI-2020-16826 CVE-2020-27741 · GHSA-xw7p-c2fg-6hg3

Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow…

LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or HTML via multiple pages and parameters.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01082 Published 2020-10-28 No fix listed CWE-79

TI-2020-16825 CVE-2020-27740 · GHSA-8mh6-v49g-9mfp

Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid…

LOW 27

Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01292 Published 2020-10-28 No fix listed

TI-2009-00344 CVE-2009-0364 · GHSA-rffq-q3v2-pw4q

Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22…

LOW 38

Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02594 Published 2009-03-24 No fix listed CWE-134

TI-2007-03706 CVE-2007-3822 · GHSA-f76m-wr28-86f7

Multiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote…

LOW 18

Multiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via (1) the who parameter to showuser; and other vectors involving (2) calendar mode…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02478 Published 2007-07-17 No fix listed

TI-2007-03705 CVE-2007-3821 · GHSA-9rjr-pq6m-pxx6

Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote…

LOW 38

Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other actions as arbitrary users via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02744 Published 2007-07-17 No fix listed

Vulnerabilities

Filters