Vulnerabilities

TI-2026-00935 CVE-2026-1213 · GHSA-r2jv-fwfr-4j8c

Askbot 0.12.2 - Insecure Direct Object Reference (IDOR)

LOW 24

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00356 Published 2026-01-27 Fixed in 0.12.3 CWE-639

TI-2015-02800 CVE-2015-3169 · GHSA-v8vw-vwqw-5733

Cross-site scripting (XSS) vulnerability in askbot 0.7.51-4.el6.noarch.

LOW 29

Cross-site scripting (XSS) vulnerability in askbot 0.7.51-4.el6.noarch.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01051 Published 2017-09-07 No fix listed CWE-79

TI-2014-01769 CVE-2014-2236 · GHSA-wwgp-h574-hhfx

Multiple cross-site scripting (XSS) vulnerabilities in Askbot before 0.7.49 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Askbot before 0.7.49 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) tag or (2) user search forms.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02095 Published 2014-03-05 No fix listed CWE-79

TI-2014-01768 CVE-2014-2235 · GHSA-hgwj-r4jx-pr26

Cross-site scripting (XSS) vulnerability in Askbot before 0.7.49 allows remote attackers…

LOW 24

Cross-site scripting (XSS) vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01925 Published 2014-03-05 No fix listed CWE-79

Vulnerabilities

Filters

Askbot 0.12.2 - Insecure Direct Object Reference (IDOR)

Cross-site scripting (XSS) vulnerability in askbot 0.7.51-4.el6.noarch.

Multiple cross-site scripting (XSS) vulnerabilities in Askbot before 0.7.49 allow remote…

Cross-site scripting (XSS) vulnerability in Askbot before 0.7.49 allows remote attackers…