Sql injection

Multiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to the 1 notes and 2 tickets components...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the 1 ticket parameter to tickets.php, 2 title parameter to notes.php, or 3 task parameter to todo.php. NOTE: some of these details are obtained from third par...

CVE-2012-1218

CVE-2012-1218 affects freelancerKit 2.35, with multiple SQL injection vulnerabilities in the notes and tickets components. The underlying issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. This is documented in multiple sources (NVD, CVE lists). The connected...

CVE-2012-1219

CVE-2012-1219 affects freelancerKit 2.35 with multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via 1) ticket parameter to tickets.php, 2) title parameter to notes.php, or 3) task parameter to todo.php. Root cause is input handling in these par...

CVE-2007-0955

The NTLMUnPackType3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cause a denial of service application crash via certain base64-encoded data following an AUTHENTICATE NTLM command to the imap port 143/tcp, which results in an out-of-bounds read...