EUVD-2012-5504

Malware in sbrugna...

EUVD-2012-3425

Malware in sbrugna...

EUVD-2012-3427

Malware in sbrugna...

EUVD-2012-3431

Malware in sbrugna...

EUVD-2012-3432

Malware in sbrugna...

EUVD-2012-3429

Malware in sbrugna...

EUVD-2012-3430

Malware in sbrugna...

EUVD-2013-2013

Malware in sbrugna...

EUVD-2012-3428

Malware in sbrugna...

EUVD-2012-3426

Malware in sbrugna...

EUVD-2012-3424

Malware in sbrugna...

CVE-2012-3473

The 1 reports API and 2 administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote attackers to generate reports and organize comments via API functions...

CVE-2012-3471

Multiple SQL injection vulnerabilities in the edit functions in 1 application/controllers/admin/reports.php and 2 application/controllers/members/reports.php in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via an incident id...

CVE-2012-3475

The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors...

CVE-2012-3474

The comments API in application/libraries/api/MYCommentsApiObject.php in the Ushahidi Platform before 2.5 allows remote attackers to obtain sensitive information about the e-mail address, IP address, and other attributes of the author of a comment via an API function call...

CVE-2012-3476

Multiple cross-site scripting XSS vulnerabilities in 1 application/views/admin/layout.php and 2 themes/default/views/header.php in the Ushahidi Platform before 2.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to a site name...

CVE-2012-3472

The email API in application/libraries/api/MYEmailApiObject.php in the Ushahidi Platform before 2.5 does not require authentication, which allows remote attackers to list, delete, or organize messages via a GET request...

CVE-2012-3468

Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to 1 the verify function in application/controllers/alerts.php, 2 the saveall function in application/models/settings.php, or 3 the media type to...

CVE-2012-3470

Multiple SQL injection vulnerabilities in application/libraries/api/MYCountriesApiObject.php in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to getcountries functions...

CVE-2012-5618

Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens...