Lucene search
+L
Slashcode.comSlash

3 matches found

CVE
CVE
added 2008/06/05 8:21 p.m.65 views

CVE-2008-2231

The CVE in question affects Slash, the Slashdot-Like Automated Storytelling Homepage (Slashcode) R_2_5_0_94 and earlier. The issue is an SQL injection vulnerability via the id parameter, caused by insufficient input sanitization that enables remote attackers to execute SQL commands and read table...

7.5CVSS7.5AI score0.01796EPSS
Save
CVE
CVE
added 2008/06/05 8:21 p.m.54 views

CVE-2008-2553

Affected product: Slash, the Slashdot Like Automated Storytelling Homepage (Slashcode). Vulnerability: Cross-site scripting (XSS) via the userfield parameter in Slashcode releases up to R_2_5_0_94. Impact (as stated): Remote attackers can inject arbitrary web script or HTML. No other impact detai...

4.3CVSS5.5AI score0.01562EPSS
Save
CVE
CVE
added 2005/03/28 5:0 a.m.46 views

CVE-2002-1647

Technical details are not publicly available in the provided documents. Monitor for updates.

5CVSS7.2AI score0.01532EPSS
Save