Chris Cooper

Researcher fromReaction Penetration Testing
#17627of 60,596
17.6Total CVSS
Vulnerabilities · 3
Medium
3
PT-2014-2278
2014-09-11
6.5
CVE-2012-4240
Intermesh
Group-Office
The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the `sort` parameter in the modules/calendar/json.php file.
PT-2012-5268
2012-08-20
4.3
CVE-2012-4236
Total Shop Uk
Total Shop Uk Ecommerce Open Source
A cross-site scripting (XSS) issue exists due to insufficient input validation in the refresh page function. This allows remote attackers to inject arbitrary web script or HTML via the PATH INFO.
PT-2012-5269
2012-08-20
6.8
CVE-2012-4237
Tcexam
Tcexam
The issue allows remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands. This can be achieved via the `subject module id` parameter to (1) "tce edit answer.php" or (2) "tce edit question.php" API endpoints.