Vulnerabilities

TI-2011-01725 CVE-2011-1954 · GHSA-w72q-pr5j-gvx4

Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to (1) ajax-weblog-guardar.php, (2) v…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00671 Published 2011-06-06 No fix listed CWE-352

TI-2011-01724 CVE-2011-1953 · GHSA-26pm-x559-r4h2

Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitrary web script or HTML via an attribute of a (1) P, a (2) STRONG, a (3) A, a (4)…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01141 Published 2011-06-06 No fix listed CWE-79

TI-2011-01723 CVE-2011-1952 · GHSA-2xx2-7jhq-rw7v

common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial…

LOW 26

common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup, as demonstrated by an a< sequence.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01543 Published 2011-06-06 No fix listed CWE-399

Vulnerabilities

Filters

Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2…

Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution…

common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial…