CVE-2011-1105

Summary: CVE-2011-1105 maps to multiple XSS vulnerabilities in Mutare EVM. The issue allows remote attackers to inject arbitrary web script or HTML via (1) a delivery address and possibly (2) a PIN. The available documents confirm the affected product (Mutare EVM) and the vulnerable vectors, but ...

CVE-2011-1104

Mutare EVM is affected by multiple CSRF vulnerabilities that allow remote attackers to hijack user authentication to perform actions such as (1) changing a PIN, (2) deleting messages, (3) adding a delivery address, or (4) changing a delivery address. The provided documents describe these CSRF fla...