CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

NVD•added 2015/01/01 11:59 a.m.•9 views

CVE-2011-5300

6.8CVSS7.1AI score0.00121EPSS

NVD•added 2015/01/01 11:59 a.m.•10 views

CVE-2011-5299

Multiple cross-site scripting XSS vulnerabilities in poMMo Aardvark PR16.1 allow remote attackers to inject arbitrary web script or HTML via 1 the referer parameter to index.php, 2 the sitename parameter to admin/setup/config/general.php, 3 the groupname parameter to...

4.3CVSS5.8AI score0.00225EPSS

Prion•added 2015/01/01 11:59 a.m.•10 views

Cross site request forgery (csrf)

6.8CVSS7.6AI score0.00121EPSS

Prion•added 2015/01/01 11:59 a.m.•10 views

Cross site scripting

4.3CVSS6.1AI score0.00225EPSS

CVE•added 2015/01/01 11:0 a.m.•43 views

CVE-2011-5299

poMMo Aardvark PR16.1 is affected by multiple cross-site scripting (XSS) vulnerabilities allowing remote attackers to inject arbitrary web script or HTML via four parameters: referer (index.php), site_name (admin/setup/config/general.php), group_name (admin/subscribers/subscribers_groups.php), an...

4.3CVSS5.9AI score0.00225EPSS

Cvelist•added 2015/01/01 11:0 a.m.•12 views

CVE-2011-5299

5.8AI score0.00225EPSS

CVE•added 2015/01/01 11:0 a.m.•54 views

CVE-2011-5300

CVE-2011-5300 affects poMMo Aardvark PR16.1. a CSRF in admin/setup/config/users.php allows remote attackers to hijack administrator authentication by submitting requests that modify credentials via certain admin_ parameters. Root cause is a CSRF in the credential-modification flow. Impact describ...

6.8CVSS7.3AI score0.00121EPSS

Packet Storm•added 2011/10/28 12:0 a.m.•53 views

poMMo Aardvark PR16.1 Cross Site Scripting

Hello list! I want to warn you about multiple security vulnerabilities in poMMo. These are Cross-Site Scripting, Brute Force and Insufficient Anti-automation vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are all versions of poMMo poMMo Aardvark...

7.4AI score

securityvulns•added 2011/05/11 12:0 a.m.•49 views

HTB22976: Multiple XSS (Cross Site Scripting) vulnerabilities in poMMo

Vulnerability ID: HTB22976 Reference: http://www.htbridge.ch/advisory/multiplexsscrosssitescriptingvulnerabilitiesinpommo.html Product: poMMo Vendor: Brice Burgess http://pommo.org/ Vulnerable Version: Aardvark PR16.1 Vendor Notification: 26 April 2011 Vulnerability Type: XSS Cross Site Scripting...

0.4AI score

securityvulns•added 2011/05/11 12:0 a.m.•55 views

HTB22977: XSRF (CSRF) in poMMo

Vulnerability ID: HTB22977 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinpommo.html Product: poMMo Vendor: Brice Burgess http://pommo.org/ Vulnerable Version: Aardvark PR16.1 Vendor Notification: 26 April 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Low Credit:...

7AI score

exploitpack•added 2011/05/10 12:0 a.m.•24 views

poMMo Aardvark PR16.1 - Multiple Cross-Site Scripting Vulnerabilities

poMMo Aardvark PR16.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47786/info poMMo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

7AI score

Exploit DB•added 2011/05/10 12:0 a.m.•26 views

poMMo Aardvark PR16.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47786/info poMMo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

7.4AI score

Packet Storm•added 2011/05/10 12:0 a.m.•29 views

poMMo Aardvark PR16.1 Cross Site Request Forgery / Cross Site Scripting

============================= Vulnerability ID: HTB22976 Reference: http://www.htbridge.ch/advisory/multiplexsscrosssitescriptingvulnerabilitiesinpommo.html Product: poMMo Vendor: Brice Burgess http://pommo.org/ Vulnerable Version: Aardvark PR16.1 Vendor Notification: 26 April 2011 Vulnerability...

7AI score