UP
Product
Ushahidi Platform
10
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Ushahidi Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-2025 | – | Apr 25 | Cross-site scripting (XSS) vulnerability in Ushahidi Platform 2.5.x through 2.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: 2.5; 2.6; 2.6.1 |
| CVE-2012-3476 | – | Aug 12 | Multiple cross-site scripting (XSS) vulnerabilities in (1) application/views/admin/layout.php and (2) themes/default/views/header.php in the Ushahidi Platform before 2.5 allow… Affected: through 2.4.1; 1.0; 1.2; 2.0; 2.1; 2.2; +4 more |
| CVE-2012-3475 | – | Aug 12 | The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified… Affected: through 2.4.1; 1.0; 1.2; 2.0; 2.1; 2.2; +4 more |
| CVE-2012-3474 | – | Aug 12 | The comments API in application/libraries/api/MY_Comments_Api_Object.php in the Ushahidi Platform before 2.5 allows remote attackers to obtain sensitive information about the… Affected: through 2.4.1; 1.0; 1.2; 2.0; 2.1; 2.2; +4 more |
| CVE-2012-3473 | – | Aug 12 | The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote attackers to generate… Affected: through 2.4.1; 1.0; 1.2; 2.0; 2.1; 2.2; +4 more |
| CVE-2012-3472 | – | Aug 12 | The email API in application/libraries/api/MY_Email_Api_Object.php in the Ushahidi Platform before 2.5 does not require authentication, which allows remote attackers to list,… Affected: through 2.4.1; 1.0; 1.2; 2.0; 2.1; 2.2; +4 more |
| CVE-2012-3471 | – | Aug 12 | Multiple SQL injection vulnerabilities in the edit functions in (1) application/controllers/admin/reports.php and (2) application/controllers/members/reports.php in the Ushahidi… Affected: through 2.4.1; 1.0; 1.2; 2.0; 2.1; 2.2; +4 more |
| CVE-2012-3470 | – | Aug 12 | Multiple SQL injection vulnerabilities in application/libraries/api/MY_Countries_Api_Object.php in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL… Affected: through 2.4.1; 1.0; 1.2; 2.0; 2.1; 2.2; +4 more |
| CVE-2012-3469 | – | Aug 12 | Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the messages admin… Affected: through 2.4.1; 1.0; 1.2; 2.0; 2.1; 2.2; +4 more |
| CVE-2012-3468 | – | Aug 12 | Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the verify function… Affected: through 2.4.1; 1.0; 1.2; 2.0; 2.1; 2.2; +4 more |
Showing 10