Vulnerabilities

TI-2012-02784 CVE-2012-3232 · GHSA-w8hj-p6g7-662c

Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded…

LOW 23

Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote attackers to inject arbitrary web script or HTML via the _text[title] parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01283 Published 2012-06-29 No fix listed CWE-79

TI-2012-02783 CVE-2012-3231 · GHSA-4h99-hpvc-jr58

Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded…

LOW 33

Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01514 Published 2012-06-27 No fix listed CWE-352

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded…

Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded…