CVE-2010-4659

StatusNet (open-source PHP-based micro-blogging platform) contains a cross-site scripting (XSS) vulnerability in error message contents up through 2010. The root cause is insufficient validation of client-side data by the web application, enabling an attacker to execute client-side code via craft...

CVE-2010-4659

Cross-site scripting XSS vulnerability in statusnet through 2010 in error message contents...

CVE-2010-4660

Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes...

Sql injection

Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes...

CVE-2010-4660

CVE-2010-4660 relates to the open‑source micro‑blogging app StatusNet . It describes an SQL injection vulnerability caused by the way addslashes is used in SQL string escapes, affecting StatusNet up through 2010 and prior versions. The connected records confirm a PHP-based issue with database inp...

CVE-2010-4660

Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes...

CVE-2010-4660: Improper Input Validation

Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes...

CVE-2010-4659: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in statusnet through 2010 in error message contents...

CVE-2011-3370

statusnet before 0.9.9 has XSS...

CVE-2011-3370

statusnet before 0.9.9 has XSS...

CVE-2011-3370

StatusNet (PHP-based micro‑blogging software) before version 0.9.9 is affected by a cross‑site scripting (XSS) vulnerability. Root cause: improper validation of client‑side data by the web application. Impact: potential execution of client‑side code. Remediation/patch details are not provided in ...

StatusNet/Laconica 0.7.4, 0.8.2, 0.9.0beta3 - Arbitrary File Reading

No description provided by source. +-------------------------------------------------------------------------------+ + StatusNet/Laconica = 0.7.4, = 0.8.2, = 0.9.0beta3 - arbitrary file reading + +-------------------------------------------------------------------------------+ Date: - 10/10/2013...

StatusNetLaconica 0.7.40.8.20.9.0beta3 - Arbitrary File Reading

StatusNetLaconica 0.7.40.8.20.9.0beta3 - Arbitrary File Reading +-------------------------------------------------------------------------------+ + StatusNet/Laconica title = $this-trimmed'title'; $this-filename = INSTALLDIR.'/doc-src/'.$this-title; //1 if !fileexists$this-filename...

StatusNet/Laconica 0.7.4/0.8.2/0.9.0beta3 - Arbitrary File Reading

+-------------------------------------------------------------------------------+ + StatusNet/Laconica title = $this-trimmed'title'; $this-filename = INSTALLDIR.'/doc-src/'.$this-title; //1 if !fileexists$this-filename $this-clientError'No such document.'; return; $this-showPage;...

CVE-2013-4137

Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via vectors related to user lists and "a particular tag format."...

Sql injection

Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via vectors related to user lists and "a particular tag format."...

CVE-2013-4137

Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via vectors related to user lists and "a particular tag format."...

CVE-2013-4137

The vulnerability CVE-2013-4137 affects StatusNet 1.0 before 1.0.2 and 1.1.0. It involves multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via vectors related to user lists and a specific tag format. The issue is cataloged with a CVSS v2 base score of 7.5...

CVE-2013-4137: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via vectors related to user lists and "a particular tag format."...

CVE-2011-3802

StatusNet 0.9.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tpl/index.php and certain other files...