Vulnerabilities

TI-2012-01133 CVE-2012-1236 · GHSA-wh9m-895f-v23v

Multiple cross-site request forgery (CSRF) vulnerabilities in Janetter before 3.3.0.0…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in Janetter before 3.3.0.0 (aka 3.3.0) allow remote attackers to hijack the authentication of arbitrary users for requests that (1) tweet, (2) upload an image fi…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00772 Published 2012-03-19 No fix listed CWE-352

TI-2012-00315 CVE-2012-0328 · GHSA-fqjx-c874-6pq8

Janetter before 3.3.0.0 (aka 3.3.0) allows remote attackers to obtain session information…

LOW 26

Janetter before 3.3.0.0 (aka 3.3.0) allows remote attackers to obtain session information for twitter.com web sites via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01524 Published 2012-03-19 No fix listed CWE-200

Vulnerabilities

Filters

Multiple cross-site request forgery (CSRF) vulnerabilities in Janetter before 3.3.0.0…

Janetter before 3.3.0.0 (aka 3.3.0) allows remote attackers to obtain session information…