39 matches found
EUVD-2011-3334
Malware in sbrugna...
EUVD-2013-4064
Malware in sbrugna...
EUVD-2011-3759
Malware in sbrugna...
EUVD-2010-4623
Malware in sbrugna...
EUVD-2010-4625
Malware in sbrugna...
EUVD-2010-4624
Malware in sbrugna...
CVE-2010-4660
Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes...
CVE-2013-4137
Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via vectors related to user lists and "a particular tag format."...
CVE-2011-3802
StatusNet 0.9.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tpl/index.php and certain other files...
CVE-2011-3370
statusnet before 0.9.9 has XSS...
CVE-2010-4658
statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks...
Design/Logic Flaw
statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks...
CVE-2010-4658
statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks...
CVE-2010-4658
CVE-2010-4658 affects StatusNet (through 2010) and relates to a vulnerability where an attacker can spoof syslog messages via newline injection. The available records describe the underlying issue as a newline-injection weakness that enables log spoofing, but there are no detailed exploit vectors...
statusnet cross-site scripting vulnerability (CNVD-2020-04299)
statusnet is an open source micro-blogging program written in PHP. A cross-site scripting vulnerability exists in versions of statusnet prior to 0.9.9. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to...
statusnet SQL Injection Vulnerability
statusnet is an open source micro-blogging program written in PHP. A SQL injection vulnerability exists in statusnet 2010 and prior versions. The vulnerability stems from a database-based application that fails to properly validate external input SQL statements. An attacker can exploit the...
Statusnet Cross-Site Scripting Vulnerability
statusnet is an open source micro-blogging program written in PHP. A cross-site scripting vulnerability exists in the content of error messages in statusnet 2010 and prior versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker ca...
CVE-2010-4659
Cross-site scripting XSS vulnerability in statusnet through 2010 in error message contents...
Cross site scripting
Cross-site scripting XSS vulnerability in statusnet through 2010 in error message contents...
CVE-2010-4659
Cross-site scripting XSS vulnerability in statusnet through 2010 in error message contents...