Vulnerabilities

TI-2012-03322 CVE-2012-3840 · GHSA-6j3w-mmjm-hjmc

Multiple cross-site scripting (XSS) vulnerabilities in index.php/users/form/user_id in…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in index.php/users/form/user_id in MyClientBase 0.12 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name or (2) last_name parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01614 Published 2012-07-03 No fix listed CWE-79

TI-2012-03321 CVE-2012-3839 · GHSA-rwpv-8qwc-53j8

Multiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase…

LOW 37

Multiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the (1) invoice_number or (2) tags parameter to index.php/invoice_…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02407 Published 2012-07-03 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in index.php/users/form/user_id in…

Multiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase…