CVE-2012-2909

Viscacha 0.8.1.1 is affected by multiple XSS vulnerabilities : input fields include (1) the text field in the Private Messages System, (2) the Bad Word field in Zensur, and (3) Portal or (4) Topic fields in Kommentar. The vulnerabilities allow remote attackers to inject arbitrary web script or HT...

CVE-2012-2908

CVE-2012-2908 refers to multiple SQL injection vulnerabilities in the admin/bbcodes.php file of Viscacha 0.8.1.1, allowing remote attackers to interfere with the database by supplying (1) bbcodeexample, (2) buttonimage, or (3) bbcodetag parameters. The NVD entry lists a base score of 7.5 ( HIGH )...

CVE-2009-4567

Viscacha 0.8 Gold is affected by multiple XSS vulnerabilities in editprofile.php (profile2 action). Specifically, the parameters (1) skype, (2) yahoo, (3) aol, (4) msn, and (5) jabber can be abused to inject arbitrary web script/HTML. The issue is exploitable by remote authenticated users, but th...