Articlefr Security Vulnerabilities and Issues — Articlefr CVE List

Lucene search

FreereprintablesArticlefr

4 matches found

CVE•added 2015/01/27 8:4 p.m.•43 views

CVE-2015-1363

Cross-site scripting (XSS) vulnerability in Free Reprintables ArticleFR 3.0.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter to search/v/.

4.3CVSS5.8AI score0.00334EPSS

CVE•added 2015/01/27 8:4 p.m.•43 views

CVE-2015-1364

SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter to register/.

7.5CVSS8.6AI score0.00912EPSS

CVE•added 2015/07/16 3:59 p.m.•35 views

CVE-2015-5530

Multiple cross-site request forgery (CSRF) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request to dashboard/users/create/.

6.8CVSS7.3AI score0.0057EPSS

CVE•added 2015/07/16 3:59 p.m.•34 views

CVE-2015-5529

Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to dashboard/settings/categories/, (2) title or (3) rel parameter to dashboard/settings/links/, or (4) url parameter to d...

4.3CVSS5.9AI score0.0713EPSS