7 matches found
EUVD-2012-1240
Malware in sbrugna...
WS-2022-0256
Due to Improper Access Control, bookwyrm is vulnerable to Insecure direct object references IDOR. This allows an attacker to create a group on other users' accounts, and affect the logic of the application. Version 0.4.5 contains a patch for this issue...
CVE-2012-1214
Cross-site scripting XSS vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...
Cross site scripting
Cross-site scripting XSS vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...
Cross site scripting
Cross-site scripting XSS vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...
CVE-2012-1214
Cross-site scripting XSS vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...
PT-2012-3137
Name of the Vulnerable Software and Affected Versions Yoono Desktop Application versions prior to 1.8.21 Description A cross-site scripting XSS issue exists in the Add friends module, allowing remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" actio...