Vulnerabilities

TI-2017-13133 CVE-2017-17904 · GHSA-r86v-9f8q-7hgr

FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the…

LOW 25

FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_profile.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00489 Published 2017-12-25 No fix listed CWE-79

TI-2017-13132 CVE-2017-17903 · GHSA-7vjf-6mpf-qv3p

LOW 38

FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00456 Published 2017-12-25 No fix listed CWE-352

TI-2017-12844 CVE-2017-17573 · GHSA-72q2-q8vp-q2h8

MEDIUM 48

FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0305 Published 2017-12-13 No fix listed CWE-89