Vulnerabilities

TI-2013-02314 CVE-2013-2629 · GHSA-vh2x-p6qx-6244

Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass…

LOW 26

Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the (1) importForm, (2) importFeed, (3) addFavorite, or (4) removeFavorite actions in action.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01389 Published 2013-12-23 No fix listed CWE-20

TI-2013-02313 CVE-2013-2628 · GHSA-82v5-32ph-37ww

Multiple cross-site request forgery (CSRF) vulnerabilities in action.php in Leed (Light…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in action.php in Leed (Light Feed), possibly before 1.5 Stable, allow remote attackers to hijack the authentication of administrators for unspecified requests, r…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0069 Published 2013-12-21 No fix listed CWE-352

TI-2013-02312 CVE-2013-2627 · GHSA-8gfg-pqqx-3q76

SQL injection vulnerability in action.php in Leed (Light Feed), possibly before 1.5…

LOW 35

SQL injection vulnerability in action.php in Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to execute arbitrary SQL commands via the id parameter in a removeFolder action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01146 Published 2013-12-21 No fix listed CWE-89

Vulnerabilities

Filters

Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass…

Multiple cross-site request forgery (CSRF) vulnerabilities in action.php in Leed (Light…

SQL injection vulnerability in action.php in Leed (Light Feed), possibly before 1.5…