Vulnerabilities

TI-2011-04317 CVE-2011-5040 · GHSA-9997-q4fw-gcgf

Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to (1) nalozi_naslov.php and (2) widget.dokumenti_lis…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03006 Published 2011-12-30 No fix listed CWE-79

TI-2011-04316 CVE-2011-5039 · GHSA-g898-w585-5p4g

Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to login.php, (3) the filter parameter to widge…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0101 Published 2011-12-30 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow…

Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers…