CPE Details
Roundup-Tracker Roundup 1.4.12
1.4.12
2012-05-31
16h36 +00:00
16h36 +00:00
2012-05-31
16h36 +00:00
16h36 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:roundup-tracker:roundup:1.4.12:*:*:*:*:*:*:*
Informations
Vendor
roundup-trackerProduct
roundupVersion
1.4.12Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header. | 5.4 |
Medium |
||
| Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents. | 5.4 |
Medium |
||
| In Roundup before 2.4.0, classhelpers (_generic.help.html) allow XSS. | 6.1 |
Medium |
||
| Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*. | 6.1 |
Medium |
||
| schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details. | 4.3 |
Medium |
||
| Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link. | 4.3 |
|||
| Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the @action parameter to support/issue1. | 4.3 |
|||
| Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter. | 4.3 |
|||
| Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the template argument to the /issue program. | 4.3 |
