Vendor/product archive

postrev / post_revolution CVEs

Beta · best-effort

3 CVEs tagged to postrev / post_revolution — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to postrev vendor archive

CVE-2011-1954

Published Jun 6, 2011

Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for reque…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2011-1953

Published Jun 6, 2011

Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitrary web script or HTML via an attribute…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2011-1952

Published Jun 6, 2011

common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup, as demonstrated by an a< sequence.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1