Vulnerabilities

TI-2015-00851 CVE-2015-0914 · GHSA-6ghq-8w3w-7q28

EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to…

LOW 26

EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01671 Published 2015-05-01 No fix listed CWE-284

TI-2015-00850 CVE-2015-0913 · GHSA-43fj-2mp7-xmm4

Cross-site scripting (XSS) vulnerability in EasyCTF before 1.4 allows remote…

LOW 19

Cross-site scripting (XSS) vulnerability in EasyCTF before 1.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00936 Published 2015-05-01 No fix listed CWE-79

TI-2015-00849 CVE-2015-0912 · GHSA-f74v-f2hp-gm4w

EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors.

LOW 31

EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01231 Published 2015-05-01 No fix listed

Vulnerabilities

Filters

EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to…

Cross-site scripting (XSS) vulnerability in EasyCTF before 1.4 allows remote…

EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors.