Vulnerabilities

TI-2012-01122 CVE-2012-1219 · GHSA-f4fc-rxg5-jwv5

Multiple cross-site scripting (XSS) vulnerabilities in freelancerKit 2.35 allow remote…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the (1) ticket parameter to tickets.php, (2) title parameter to notes.php, or (3…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01053 Published 2012-02-21 No fix listed CWE-79

TI-2012-01121 CVE-2012-1218 · GHSA-h469-86gw-qh7q

Multiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to the (1) notes and (2) tickets components.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0111 Published 2012-02-21 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in freelancerKit 2.35 allow remote…

Multiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to…