Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Pommo Clear all filters
TI-2011-04572 CVE-2011-5300 · GHSA-28ch-34rw-p44w

Cross-site request forgery (CSRF) vulnerability in admin/setup/config/users.php in poMMo…

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in admin/setup/config/users.php in poMMo Aardvark PR16.1 allows remote attackers to hijack the authentication of administrators for requests that modify credentials via cer…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00609 Published 2015-01-01 No fix listed CWE-352
TI-2011-04571 CVE-2011-5299 · GHSA-w3mh-mch9-v4xr

Multiple cross-site scripting (XSS) vulnerabilities in poMMo Aardvark PR16.1 allow remote…

Priority LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in poMMo Aardvark PR16.1 allow remote attackers to inject arbitrary web script or HTML via (1) the referer parameter to index.php, (2) the site_name parameter to admin/…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00966 Published 2015-01-01 No fix listed CWE-79