Vulnerabilities

TI-2019-04307 CVE-2019-6018 · GHSA-98qv-39wh-94xp

Cross-site scripting in NetCommons

LOW 29

Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier (NetCommons3.x) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00781 Published 2019-12-26 No fix listed CWE-79

TI-2016-04158 CVE-2016-4813 · GHSA-m765-qg53-c8v8

NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat (aka CLERK) users…

MEDIUM 42

NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat (aka CLERK) users to gain privileges by creating a SYSTEM_ADMIN account.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01889 Published 2016-06-19 No fix listed CWE-284

TI-2007-05689 CVE-2007-5950 · GHSA-p7jp-v69p-p9c2

Cross-site scripting (XSS) vulnerability in NetCommons before 1.0.11, and 1.1.x before…

LOW 23

Cross-site scripting (XSS) vulnerability in NetCommons before 1.0.11, and 1.1.x before 1.1.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-200…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2007-11-14 No fix listed CWE-79

TI-2006-04030 CVE-2006-4165 · GHSA-9mrh-g7q8-hw6q

Cross-site scripting (XSS) vulnerability in NetCommons 1.0.8 and earlier allows remote…

LOW 33

Cross-site scripting (XSS) vulnerability in NetCommons 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01309 Published 2006-08-16 No fix listed

Vulnerabilities

Filters

Cross-site scripting in NetCommons

NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat (aka CLERK) users…

Cross-site scripting (XSS) vulnerability in NetCommons before 1.0.11, and 1.1.x before…

Cross-site scripting (XSS) vulnerability in NetCommons 1.0.8 and earlier allows remote…