TI-2007-06449 CVE-2007-6758 · GHSA-3267-cjm3-377p
Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0.
Priority LOW 35
Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0.
Vulnerabilities
6 records
TI-2013-04113 CVE-2013-4691 · GHSA-fggq-jg2j-c47q
Sencha Labs Connect has XSS with connect.methodOverride()
Priority LOW 28
Sencha Labs Connect has XSS with connect.methodOverride()
TI-2013-06035 CVE-2013-7371 · GHSA-6w62-83g6-rfhj
Cross-site scripting in node-connect
Priority LOW 30
node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)
TI-2013-06034 CVE-2013-7370 · GHSA-3fw8-66wf-pr7m
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware
Priority LOW 30
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware
TI-2018-05823 CVE-2018-8046 · GHSA-wjgq-2g8m-w698
The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable…
Priority MEDIUM 64
The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data.
TI-2018-02715 CVE-2018-3717 · GHSA-rch9-xh7r-mqgw
Cross-site scripting in HackerOne connect node module
Priority LOW 27
connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.