Vulnerabilities

TI-2009-03105 CVE-2009-3261 · GHSA-gcv4-v78m-cc85

update/update_0.1.2_to_0.2.php in LiveStreet 0.2 does not require administrative…

LOW 36

update/update_0.1.2_to_0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0144 Published 2009-09-18 No fix listed CWE-287

TI-2009-03104 CVE-2009-3260 · GHSA-fq5r-xr7f-93pp

Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to…

LOW 23

Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01269 Published 2009-09-18 No fix listed CWE-79

TI-2009-03100 CVE-2009-3256 · GHSA-7g9x-xhfc-88x2

Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2…

LOW 23

Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the URI, as demonstrated by a SCRIPT element in an arbitrary para…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01253 Published 2009-09-18 No fix listed CWE-79

Vulnerabilities

Filters

update/update_0.1.2_to_0.2.php in LiveStreet 0.2 does not require administrative…

Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to…

Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2…