33 matches found
CVE-2009-0708
CVE-2009-0708 concerns CSRF vulnerabilities in SemanticScuttle before 0.91 that can allow remote attackers to hijack authentication of administrators via unknown vectors or hijack authentication of arbitrary users via vectors involving the profile page. The connected documents corroborate an CSRF...
CVE-2009-0708
Multiple cross-site request forgery CSRF vulnerabilities in SemanticScuttle before 0.91 allow remote attackers to 1 hijack the authentication of administrators via unknown vectors or 2 hijack the authentication of arbitrary users via vectors involving the profile page...
CVE-2009-0708: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in SemanticScuttle before 0.91 allow remote attackers to 1 hijack the authentication of administrators via unknown vectors or 2 hijack the authentication of arbitrary users via vectors involving the profile page...
Cross site scripting
Cross-site scripting XSS vulnerability in SemanticScuttle before 0.90 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the 1 username and 2 profile page...
CVE-2008-6113
Cross-site scripting XSS vulnerability in SemanticScuttle before 0.90 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the 1 username and 2 profile page...
CVE-2008-6113
SemanticScuttle contains a cross-site scripting (XSS) vulnerability in versions before 0.90. The issue allows remote attackers to inject arbitrary web script or HTML, via vectors related to the username and profile page. The connected sources confirm the affected software and the impact (arbitrar...
CVE-2008-6113
Cross-site scripting XSS vulnerability in SemanticScuttle before 0.90 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the 1 username and 2 profile page...
Input validation
Unspecified vulnerability in SemanticScuttle before 0.90 has unknown impact and attack vectors related to improper validation of parameters to profile.php...
CVE-2008-6110
Unspecified vulnerability in SemanticScuttle before 0.90 has unknown impact and attack vectors related to improper validation of parameters to profile.php...
CVE-2008-6110
Unspecified vulnerability in SemanticScuttle before 0.90 has unknown impact and attack vectors related to improper validation of parameters to profile.php...
CVE-2008-6110
CVE-2008-6110 : The vulnerability is described as an unspecified issue in SemanticScuttle before 0.90 related to improper validation of parameters to profile.php . The connected sources (Red Hat CVE entry, NVD/NVD listing, CVE registry, PRION, CVE List) reiterate the same description with unknown...
CVE-2008-6113: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SemanticScuttle before 0.90 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the 1 username and 2 profile page...
CVE-2008-6110: Undefined Security Weakness
Unspecified vulnerability in SemanticScuttle before 0.90 has unknown impact and attack vectors related to improper validation of parameters to profile.php...