Vulnerabilities

TI-2012-02523 CVE-2012-2909 · GHSA-j7q8-hh4q-9hpf

Multiple cross-site scripting (XSS) vulnerabilities in Viscacha 0.8.1.1 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Viscacha 0.8.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) text field in the Private Messages System, (2) Bad Word field in Zensur, o…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01605 Published 2012-05-21 No fix listed CWE-79

TI-2012-02522 CVE-2012-2908 · GHSA-5x97-c6r4-fxj7

Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow…

LOW 35

Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) bbcodeexample, (2) buttonimage, or (3) bbcodetag parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.011 Published 2012-05-21 No fix listed CWE-89

TI-2009-04323 CVE-2009-4567 · GHSA-ffhq-jq7m-75qw

Multiple cross-site scripting (XSS) vulnerabilities in editprofile.php in Viscacha 0.8…

LOW 19

Multiple cross-site scripting (XSS) vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated users to inject arbitrary web script or HTML via the (1) skype, (2) yahoo, (3) aol, (4) msn, or (5) j…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01252 Published 2010-01-05 No fix listed CWE-79

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Viscacha 0.8.1.1 allow remote…

Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow…

Multiple cross-site scripting (XSS) vulnerabilities in editprofile.php in Viscacha 0.8…